[], "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", "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"}) 03:42:59 executing program 4: clone(0x200a47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000000)) r3 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r3) ptrace$getsig(0x8, r3, 0x0, 0x0) 03:42:59 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023754708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:42:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1148.778513][ T7922] device hsr_slave_0 left promiscuous mode [ 1148.818332][ T7922] device hsr_slave_1 left promiscuous mode [ 1148.865001][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 1148.875436][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 1148.887408][ T7922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.948865][ T7922] bond0 (unregistering): Released all slaves 03:43:00 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x1, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x3000, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, r4, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r6 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="636c6561725f636163ff652c656e6f7370635f64646275672c02"]) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r7 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r7) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) ioctl$sock_ifreq(r10, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r12 = accept4$rose(r5, &(0x7f00000003c0)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0xffffffffffffffe9, 0x0) preadv(r12, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:00 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e9170000000000000000", 0x1c, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000012c0)) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000140)="00de7b8eb4040010372a5958b490e597eac5e9170000000000000000", 0x1c, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000000)="f97c442a5e73c127baf1af30ef1ae9e7", 0x10}, {&(0x7f0000000080)="17bd9960e0b590a8f62c0e0a9021736d2f14f64eb14723e24b500e2d8897baa72d975a49a26cd60e9797fbeb5fd24ccbdf660b5b5fa5f28c29048947b80128fd6ca0117b2c6038d7bf80184058f99db7378abfb2bc6b0ad2f302a840c07515b4253c856400ac1c96be1d17e50c7b2944645d6d612453980300a5a85ac1d2a915c68aaabf41583eca73554b7a9ceea68ad8fe6e2d42156f7b58826b3bc42673f79b9cff76387e0cb5b2ae6d0d1ffddf6806ba47060062c827c4134a55e84c2e414d96e7864db7a43e499068d0975e2324bf2bd48deac9b1802e6128746aed567fa89e65aa86433bec9a5609", 0xeb}, {&(0x7f0000000180)="ed5a51b2d09790cf8557dd8113e65c83547e8739f20407912a0d4179dae6a03e9dfbc0bc1dc9e8a4646f590ea1da98ad6ec4504706f88f1c3562139135f1558e16be0e28eec4922098d1a0023691bbd2f4998c3138aa5f7b372a277fc10c5231527ae0c4d8a248fa8675ffd6f5aad1e5af13fa46bac31b21ed12feaacfe6ca930ec5fb52233d783814d0df8a6e15411e4bb4a0524e22ebe65bd6bb6f614330a1a00c5d6364bb6b459817f805faec952dd64e", 0xb2}], 0x4, r6) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:00 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023764708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:00 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000100)={0x3f, 0x722}) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x8, 0x8, 0x40, 0x7f, 0x0, 0x37, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x8, 0x7, 0x80000001, 0x0, 0x7, 0x9, 0x101}, 0x0, 0x4, 0xffffffffffffffff, 0x0) [ 1149.742674][T21637] IPVS: ftp: loaded support on port[0] = 21 [ 1149.816415][T21637] chnl_net:caif_netlink_parms(): no params data found [ 1149.849831][T21637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.856911][T21637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.867154][T21637] device bridge_slave_0 entered promiscuous mode [ 1149.874692][T21637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.881856][T21637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.889589][T21637] device bridge_slave_1 entered promiscuous mode [ 1149.907011][T21637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.917605][T21637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.937140][T21637] team0: Port device team_slave_0 added [ 1149.943822][T21637] team0: Port device team_slave_1 added [ 1150.010324][T21637] device hsr_slave_0 entered promiscuous mode [ 1150.068487][T21637] device hsr_slave_1 entered promiscuous mode [ 1150.118344][T21637] debugfs: Directory 'hsr0' with parent '/' already present! [ 1150.156539][T21637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.166618][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1150.174882][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1150.184829][T21637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.194219][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1150.203063][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1150.211632][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.218695][T10544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.226674][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1150.236366][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1150.244933][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1150.253605][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.260643][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.278679][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1150.287502][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1150.296413][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1150.305428][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1150.314082][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1150.322750][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1150.331377][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1150.339876][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1150.348070][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1150.356703][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1150.365156][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1150.374331][T21637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1150.389770][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1150.397350][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1150.408060][T21637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.585185][T21647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.592487][T21647] bridge0: port 1(bridge_slave_0) entered disabled state 03:43:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:02 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8) preadv(r10, 0x0, 0xfffffe9d, 0x4000000000) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:02 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023774708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) signalfd4(r4, &(0x7f0000000000)={0x9}, 0x8, 0x40000) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) 03:43:02 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000e310", @ANYRES16=r4, @ANYBLOB="000826bd7000ffdbdf250100000008000800ac1e0001080002000a00000014000700fe8000000000000000000000000000aa0800040001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(r0, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) r6 = getpid() r7 = syz_open_dev$vbi(&(0x7f0000000500)='/dev/vbi#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x406, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/de6/qat\x9a\x02\x13\x84\xe5s\xea_\x00', 0x220000, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000440)={0x4d8, 0x4, 0x20, 0xcf, &(0x7f0000000300)=""/207, 0x1000, &(0x7f0000000580)=""/4096, 0x0, &(0x7f0000000400)}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000540)) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000040), 0x4) sched_setscheduler(r6, 0x5, 0x0) ptrace$getsig(0x8, r6, 0x6fcc, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f00000002c0)={0xbf}) 03:43:02 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:02 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023784708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:02 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000000)={0xfffffffffffffffe}, 0x8, 0x80000) 03:43:02 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000237a4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:02 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:02 executing program 4: setrlimit(0x8, &(0x7f0000000040)={0x80000001, 0x9}) clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000000)="a32a32829c99ac3db9d01a4e7a492f4643ddff6198014f9a931d547ab32d13106a858cdd81a7a14de196c8bc", 0x6b) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x38, 0x0) 03:43:02 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) splice(r3, &(0x7f0000000000)=0x1, r2, &(0x7f0000000080)=0x3, 0xfffffffffffffff9, 0x8) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)) bind$rds(r4, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VHOST_RESET_OWNER(r8, 0xaf02, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000100)="5030ba87ddd44be0374b5621a8272492", 0x10}], 0x2, 0xd) 03:43:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1152.459334][ T7922] device bridge_slave_1 left promiscuous mode [ 1152.465603][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.509251][ T7922] device bridge_slave_0 left promiscuous mode [ 1152.515374][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.559356][ T7922] device bridge_slave_1 left promiscuous mode [ 1152.565608][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.618812][ T7922] device bridge_slave_0 left promiscuous mode [ 1152.625012][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.818462][ T7922] device hsr_slave_0 left promiscuous mode [ 1153.868652][ T7922] device hsr_slave_1 left promiscuous mode [ 1153.915230][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 1153.924951][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 1153.936834][ T7922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.997228][ T7922] bond0 (unregistering): Released all slaves [ 1154.128983][ T7922] device hsr_slave_0 left promiscuous mode [ 1154.168391][ T7922] device hsr_slave_1 left promiscuous mode [ 1154.214521][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 1154.224845][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 1154.234558][ T7922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1154.321686][ T7922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1154.397911][ T7922] bond0 (unregistering): Released all slaves [ 1154.546627][T21994] IPVS: ftp: loaded support on port[0] = 21 [ 1154.594991][T21994] chnl_net:caif_netlink_parms(): no params data found [ 1154.621698][T21994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.628930][T21994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.636382][T21994] device bridge_slave_0 entered promiscuous mode [ 1154.643675][T21994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.650731][T21994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.658601][T21994] device bridge_slave_1 entered promiscuous mode [ 1154.673792][T21994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.684054][T21994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.702172][T21994] team0: Port device team_slave_0 added [ 1154.709123][T21994] team0: Port device team_slave_1 added [ 1154.769753][T21994] device hsr_slave_0 entered promiscuous mode [ 1154.818671][T21994] device hsr_slave_1 entered promiscuous mode [ 1154.996475][T21994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.003652][T21994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.010904][T21994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.018053][T21994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.056329][T21994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.071529][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1155.082206][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.090923][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.103562][T21994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.117423][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1155.126591][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.133620][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.164020][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1155.172729][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.179771][T10544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.192757][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1155.202124][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1155.213600][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1155.222452][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1155.233938][T21994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1155.242630][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1155.261187][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1155.272431][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1155.282440][T21994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.425032][T22004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.432372][T22004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.486720][T22004] bond0: (slave bond_slave_1): Releasing backup interface 03:43:07 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c65fc725f00006368652c656e6f7370635d64657675672c003445df794125f4e5431ac541e763aae79226cb30d74c71f7e395e28e8d9c9ce549877189d6dac067125ced660e7a6c9644052a7aeb17f4ddb479c0919f17e1b122e55365081772233605418b937a16e325a9b8ca8363019014eb601c4b18"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:07 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r3, &(0x7f0000000080)="76007272a3b158f9e7e4089a710891e52c58907d281f1671aa1cf3fef18588ee0602d3d839f9c0e9eb3511784e2e173a883d902297980a11877465d16b13e7f8f2cc6a3bc47102fe968ac9ce91aeb94b79bee94e38455a351e3d06876ff2c928bb5e3cb2bd6b8b", 0x22a) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:07 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000237b4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:07 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:07 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000237d4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/242, &(0x7f0000000180)=0xf2) bind$rds(r1, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 03:43:07 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000)=0x8, 0x4) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:07 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x40, 0x1, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561725f63616368010000006f7370635f04456275672c00f837a52c572f2a6dd4c364b0f04d851cc476da50f019d4ebd97a638a977cf612236e1ae44c924d52d5d33feacce143e068736fc1ab17e09bc6dd1fd56fca789b4bcee71c9de7c7c73b05d6b5ac301bc32592b61ab9abe91a7fe81ddf9fe1f3767831f365eb6daa23675eac179d9a258557c692ebd2ce3e"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x1039c, 0x3) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:07 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000237e4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x76a, 0x101000) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x3ff) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r4, r7, 0x0, 0xc, &(0x7f0000000100)='/dev/video#\x00'}, 0x30) 03:43:07 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB='clear_cachs,enospc_debug,\x00']) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1157.759287][ T7922] device bridge_slave_1 left promiscuous mode [ 1157.765469][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.828939][ T7922] device bridge_slave_0 left promiscuous mode [ 1157.835136][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.879949][ T7922] device bridge_slave_1 left promiscuous mode [ 1157.886225][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.938740][ T7922] device bridge_slave_0 left promiscuous mode [ 1157.945016][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.148857][ T7922] device hsr_slave_0 left promiscuous mode [ 1159.198318][ T7922] device hsr_slave_1 left promiscuous mode [ 1159.274083][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 1159.284605][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 1159.296862][ T7922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.377781][ T7922] bond0 (unregistering): Released all slaves [ 1159.508428][ T7922] device hsr_slave_0 left promiscuous mode [ 1159.578403][ T7922] device hsr_slave_1 left promiscuous mode [ 1159.644566][ T7922] team0 (unregistering): Port device team_slave_1 removed [ 1159.654963][ T7922] team0 (unregistering): Port device team_slave_0 removed [ 1159.664616][ T7922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.701814][ T7922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.767923][ T7922] bond0 (unregistering): Released all slaves [ 1159.866643][T22246] IPVS: ftp: loaded support on port[0] = 21 [ 1159.866763][T22248] IPVS: ftp: loaded support on port[0] = 21 [ 1159.946631][T22246] chnl_net:caif_netlink_parms(): no params data found [ 1159.987629][T22246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.994729][T22246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.002485][T22246] device bridge_slave_0 entered promiscuous mode [ 1160.009924][T22246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.016958][T22246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.024652][T22246] device bridge_slave_1 entered promiscuous mode [ 1160.043826][T22248] chnl_net:caif_netlink_parms(): no params data found [ 1160.060722][T22246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.071465][T22246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.204145][T22248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.211518][T22248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.219660][T22248] device bridge_slave_0 entered promiscuous mode [ 1160.227694][T22246] team0: Port device team_slave_0 added [ 1160.235004][T22246] team0: Port device team_slave_1 added [ 1160.241005][T22248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.248011][T22248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.256236][T22248] device bridge_slave_1 entered promiscuous mode [ 1160.282836][T22248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.400144][T22246] device hsr_slave_0 entered promiscuous mode [ 1160.428482][T22246] device hsr_slave_1 entered promiscuous mode [ 1160.469494][T22248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.492382][T22246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.499595][T22246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.506890][T22246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.514018][T22246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.530602][T22248] team0: Port device team_slave_0 added [ 1160.537304][T22248] team0: Port device team_slave_1 added [ 1160.640602][T22248] device hsr_slave_0 entered promiscuous mode [ 1160.688554][T22248] device hsr_slave_1 entered promiscuous mode [ 1160.728318][T22248] debugfs: Directory 'hsr0' with parent '/' already present! [ 1160.756149][T22248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.763202][T22248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.770458][T22248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.777475][T22248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.789866][T22246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.814221][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1160.825470][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.833621][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.847693][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.855700][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.871962][T22246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.894194][T22248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.904351][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.913409][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.922142][T19183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.929184][T19183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.947687][T22246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1160.959056][T22246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1160.971482][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.980406][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.988896][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.995918][T10544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.003902][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.012635][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.021558][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.030065][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.038898][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.047550][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.056240][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.064607][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.073056][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1161.081356][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.089637][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1161.097689][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.112768][T22248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.120360][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1161.128064][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1161.142455][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1161.151345][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1161.159787][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.166845][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.174565][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1161.183324][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.191785][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.198831][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.208382][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1161.215816][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1161.229621][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.238633][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.249820][T22246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.266454][T22248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1161.279737][T22248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1161.291770][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.300337][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.309154][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.317603][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.326401][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.334644][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.343185][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1161.351569][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.359986][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1161.368295][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.382951][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1161.390523][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1161.401020][T22248] 8021q: adding VLAN 0 to HW filter on device batadv0 03:43:13 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCRSACCEPT(r4, 0x89e3) 03:43:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 03:43:13 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023824708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:13 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x80282) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1161.540669][T22267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.548503][T22267] bridge0: port 1(bridge_slave_0) entered disabled state 03:43:13 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023834708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:13 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:13 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(r1, &(0x7f0000000d40)="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", 0xff02) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) pwrite64(r7, &(0x7f0000000080)="19f4297de7da55d29e3bbeef079327f86bb99210e26186315e85", 0x1a, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:13 executing program 0: 03:43:13 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023864708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:14 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x5, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:14 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) wait4(r2, &(0x7f0000000000), 0x100000d, &(0x7f0000000040)) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x44, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x216102, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7, 0x20102) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000000540)={0x4, &(0x7f0000000180)=""/54, &(0x7f00000004c0)=[{0x100, 0x86, 0x8, &(0x7f00000001c0)=""/134}, {0x9, 0xfb, 0x0, &(0x7f00000002c0)=""/251}, {0x1, 0x6c, 0x93, &(0x7f00000003c0)=""/108}, {0x9, 0x74, 0xb2fd, &(0x7f0000000440)=""/116}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x5, 0x8) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r7, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r8, 0x0) 03:43:14 executing program 0: 03:43:14 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023874708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:14 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:14 executing program 0: 03:43:14 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) ptrace$getsig(0x8, r2, 0x0, 0x0) 03:43:14 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023894708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:14 executing program 0: 03:43:14 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:14 executing program 0: 03:43:14 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x206, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="636c657370635f64feffffff"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:14 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000238a4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41bf, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, r6, 0x30, 0x0, @in6={0xa, 0x4e22, 0xfa1000, @mcast1, 0x9f49}}}, 0xa0) bind$rds(r1, 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2c4, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000080)={0xf, {0x1000, 0x8000, 0x7fff, 0x8001}}) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r8, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xc) munlockall() 03:43:14 executing program 0: 03:43:15 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x100) ptrace$getsig(0x8, r0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0xa082, 0x0, 0x8}, 0xc) 03:43:15 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:15 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:15 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000238c4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:15 executing program 0: 03:43:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = gettid() ptrace$peekuser(0x3, r3, 0x15ba) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:15 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000238e4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:15 executing program 0: 03:43:15 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x400000000000010, 0x802, 0x0) write(r6, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r7 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000040)={0x10000, "88515e9b670b950bc956faa2ac850361462533d0b5bfd0f99f9d69e862dde73f"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={r8}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000000)={r8, 0x4, 0x16, "38f45aa5ce45f869392bfa97731283321dcf39b2c593"}, 0x1e) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000000)={r8, @in6={{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}, 0x84) r9 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum}) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000080)={0x3, [0xfd, 0x6, 0x2, 0x3, 0x5, 0x6, 0x1000, 0x6, 0x800, 0x8, 0xb4, 0x0, 0x6, 0x100, 0x1000, 0x6, 0x6, 0x1, 0x9, 0x4, 0x8, 0x56, 0x5, 0xf000, 0x1000, 0x1, 0x8, 0x9, 0x1, 0x101, 0x8, 0x100, 0x48, 0x1, 0x7, 0x5, 0x1, 0x5, 0x4, 0x9, 0x6, 0x6, 0x3, 0x1, 0x8, 0x7fff, 0x4, 0x8001], 0x3}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) 03:43:15 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000238f4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:15 executing program 0: 03:43:15 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x9, 0x6416, 0x7, 0x9bf0, 0x1f, 0x7bf, 0x6]}, 0x12) [ 1165.118631][ T7] device bridge_slave_1 left promiscuous mode [ 1165.124889][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.189005][ T7] device bridge_slave_0 left promiscuous mode [ 1165.195251][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.858431][ T7] device hsr_slave_0 left promiscuous mode [ 1165.898578][ T7] device hsr_slave_1 left promiscuous mode [ 1165.964561][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1165.974917][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1165.985227][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.041723][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.140766][ T7] bond0 (unregistering): Released all slaves [ 1166.265455][T23118] IPVS: ftp: loaded support on port[0] = 21 [ 1166.313077][T23118] chnl_net:caif_netlink_parms(): no params data found [ 1166.338809][T23118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.345990][T23118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.355746][T23118] device bridge_slave_0 entered promiscuous mode [ 1166.363117][T23118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.370250][T23118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.377834][T23118] device bridge_slave_1 entered promiscuous mode [ 1166.439781][T23118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.451789][T23118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.473690][T23118] team0: Port device team_slave_0 added [ 1166.480323][T23118] team0: Port device team_slave_1 added [ 1166.530239][T23118] device hsr_slave_0 entered promiscuous mode [ 1166.568478][T23118] device hsr_slave_1 entered promiscuous mode [ 1166.611288][T23118] debugfs: Directory 'hsr0' with parent '/' already present! [ 1166.626118][T23118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.633191][T23118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.640644][T23118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.647658][T23118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.685824][T23118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.701859][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1166.713579][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.721941][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.737535][T23118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.748777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1166.757353][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.764437][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.780694][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1166.789315][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.796352][ T7607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.814777][T23118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1166.825400][T23118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1166.838606][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1166.847384][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1166.856304][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1166.867932][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1166.876531][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1166.884220][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1166.897630][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1166.905057][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1166.915597][T23118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.070234][T23128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.077363][T23128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.134877][T23128] bond0: (slave bond_slave_1): Releasing backup interface 03:43:18 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f0000000400)=' \x00\x00\x00/i\x01\xd8\xbd\x99C\xecdj\x04\xff', 0x0, 0x68002) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x100) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c00000080e1030000652c656e6f31adfd0005000000a432730c535e46"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:18 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:18 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023904708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@ax25={{0x3, @default}, [@netrom, @netrom, @null, @default, @netrom, @rose, @default, @rose]}, &(0x7f0000000200)=0x80, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000240)={0x3, 0x7, 0x5, 0xfff}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80c00) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000140)={0x0, 0x40, &(0x7f00000002c0)="a7e84c7e59f8ef3ba137da37b0218845a221b772e8a8e9fc0fbf53048b190a942d4c9753347f8bac71294d31f0703e89fd59b13ab68c07b3f5f812569ac529f48f16694fac1dae25d16ef1f9f9c372aacfda9c7cbe71e6d84b0668cd20f432b4dc3e655aefe36a88d13021cf634534d9bcfef9bbe2f2769fde245de250c4854efaabce3e00cf39bb06dd3e5c632b0e577a6b41ff033e75183ab84d22e90000000000000000", {0x5, 0x5, 0x0, 0x7, 0xfffff, 0x101, 0x6, 0x1}}) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r3, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x2010, r4, 0x2000) 03:43:18 executing program 0: 03:43:18 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sysfs$3(0x3) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000040)={0xb}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:18 executing program 0: 03:43:19 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023924708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xa2000) faccessat(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x200) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x401) fstatfs(r4, &(0x7f00000000c0)=""/70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RREADDIR(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="bf000000290201feffffff8001000000070000000000000007000000000000000107002e2f66696c65300000000000050000000000000009000000000000000607002e2f66696c6530800300010c33c86336e2629cf09145000006000000000000002b060000000000000207002e2f66696c6530400200000004000000a15600000400000000000000e101002e0003000000030000000000000001010000000000000907002e2f66696c65300000000000020000000000000008000000000000003f07002e2f66696c6530a2e9d2cc20ed61ddbcd8da0103780ae6c63210fd5380f4a7d2800d0141dd55be233323b88fbf85693863cb80d2d3399b427bc1962f6cc52d89103e0743ef09896719d5e903fe2e1c5c311504c3fe64e481cbe44d40cc190cea929f41d417584523af030214b0693484a118decb77089143e073d8219c727ff7ef020a24970f39fe9002084f233f89d7a219d95d8888ca98bae8a001"], 0xbf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0xfe00, 0x7, @dev={0xfe, 0x80, [], 0xb}, 0x20}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @multicast1}], 0x6c) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x8, 0x8012, r3, 0x0) 03:43:19 executing program 0: 03:43:19 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={0x5}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:19 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="2c00000000000000000000000000000000000000000000f10000"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:19 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200800, 0x0) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pkey_free(0xffffffffffffffff) prctl$PR_SET_DUMPABLE(0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TCSETS2(r2, 0x402c542b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000008000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8, 0x15]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) 03:43:19 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:19 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023934708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x2c, 0x7, 0x0) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dcv/usbmon#\x00', 0x0, 0x30000) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000000)=0x5) 03:43:19 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$UHID_CREATE2(r7, &(0x7f0000000040)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x73, 0x2, 0x3ff, 0x4b3fd0a2, 0x0, 0x800, "a6d227d9da3453ff48e4c8feee463221d6c4d7bf9d480f6e01bbb4406fc9ee425e7d584e1a24c2827747c845db0abc09fe7ec36de201e737ebd445190d6c899967715ffbfc0d8ec5bb2933db1a18c447745faa32438161cd186b9c6d38aeda7f2b50ed7762dbed623b8cc330237e6cb5ef3b04"}, 0x18b) 03:43:19 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mq_open(&(0x7f0000000480)='bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', 0x0, 0x3d, &(0x7f00000004c0)={0x8, 0x9, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x68}) r8 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x0, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) fcntl$dupfd(r8, 0x406, r14) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r15 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r15, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:19 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023944708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7c, 0xea, 0x1f, 0x8, 0x401, 0x2, 0x3, 0x1, 0x19a, 0x38, 0x40, 0x1, 0x8, 0x20, 0x2, 0x0, 0x7b1}, [{0x0, 0x4, 0x101, 0x3ff, 0x8, 0xfff, 0x10000, 0x30000}, {0x1, 0x4, 0x8b0, 0x3, 0x1, 0x1, 0x18, 0xc8d2}], "6a188cab71831c4040ecab7dac6fda99517bbd45c826a8619d37fc33f15e50fea7f978eb8a52cb589fcb7975062a3339a8b7e2c9a995bce37ab0d4e5e746bed761c6ec2f85a5acc1c5a53938446350709cdb6b07b31fcfc1388971d427192cb4561facacdc9fc8ce863a167f396a8c26e49e79c3306c1505e20727e5d645744e69b40ee7f57d6969e4b807e6bdbe02c14850bbb12ee9e9", [[], [], [], []]}, 0x50f) r8 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r8, 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r9, 0x0) 03:43:19 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023954708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd7531c55bfc9a193}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:20 executing program 0: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x8, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x26}, 0x28, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:43:20 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:20 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023964708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:20 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000440)={'erspan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e22, 0x6, @mcast1, 0x24c0}, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xf}, 0x5}, 0x5, [0xffff9e4f, 0x5, 0x7ff, 0x80, 0x8, 0x3ff, 0x6, 0xb59]}, 0x5c) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000004c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0xff, 'syz0\x00', @default, 0x1, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000300)={0xa00000, 0xfffffffa, 0xfffffffa, [], &(0x7f0000000200)={0x9909cd, 0x3, [], @p_u8=&(0x7f00000001c0)=0x1f}}) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000100)=0x10000, 0x4) r10 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r10, 0xc0345641, &(0x7f0000000040)={0xff, "88515e9b670b950bc956faa2ac850361462533d0b5bfd0f99f9d69e862dde73f", 0x0, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={r14}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r14, @ANYBLOB="0422ee061f8e0d789500160038f45aa5ce45f869392bea97731283321dcf39b29393"], 0x1e) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000000)={r14, 0xd, 0xfffeffff, 0x7, 0x3, 0xa8, 0x9, 0x0, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfffffffb, 0x254, 0xfff, 0x10001, 0x40}}, &(0x7f00000000c0)=0xb0) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1168.782168][T23500] Invalid argument reading file caps for ./file0 [ 1168.878774][T23509] Invalid argument reading file caps for ./file0 03:43:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:20 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r3 = socket(0x0, 0x2, 0x0) getsockopt$bt_hci(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000005c0)={0x1, 0x2}) ftruncate(r1, 0x1000000) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000080)={0x34}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000640)='NET_DM\x00') ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0xe995, 0x7}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 03:43:20 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x289, 0x0, 0x2}]}) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1169.728867][ T7] device bridge_slave_1 left promiscuous mode [ 1169.735175][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.798921][ T7] device bridge_slave_0 left promiscuous mode [ 1169.805370][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.468704][ T7] device hsr_slave_0 left promiscuous mode [ 1170.508452][ T7] device hsr_slave_1 left promiscuous mode [ 1170.584232][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1170.594201][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1170.606242][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.658578][ T7] bond0 (unregistering): Released all slaves [ 1170.883667][T23737] IPVS: ftp: loaded support on port[0] = 21 [ 1170.955655][T23737] chnl_net:caif_netlink_parms(): no params data found [ 1170.988182][T23737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.995394][T23737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.006062][T23737] device bridge_slave_0 entered promiscuous mode [ 1171.013884][T23737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.023933][T23737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.031824][T23737] device bridge_slave_1 entered promiscuous mode [ 1171.052183][T23737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.062566][T23737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.083304][T23737] team0: Port device team_slave_0 added [ 1171.092451][T23737] team0: Port device team_slave_1 added [ 1171.172769][T23737] device hsr_slave_0 entered promiscuous mode [ 1171.218509][T23737] device hsr_slave_1 entered promiscuous mode [ 1171.268346][T23737] debugfs: Directory 'hsr0' with parent '/' already present! [ 1171.285872][T23737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.292970][T23737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.300247][T23737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.307280][T23737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.347796][T23737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.363592][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1171.374290][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.382223][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.394504][T23737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.404487][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1171.413082][T19183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.420117][T19183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.440784][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1171.449739][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.456907][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.465516][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1171.474273][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1171.482724][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1171.491321][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1171.502492][T23737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1171.514386][T23737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1171.523581][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1171.538635][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1171.546030][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1171.555861][T23737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.705138][T23747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.712538][T23747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.821946][T23748] bond0: (slave bond_slave_1): Releasing backup interface 03:43:23 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB='cleaz_cacg,\x00']) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:23 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023974708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:23 executing program 4: clone(0x410effd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x4, {0x8, 0x80, "e32f7aaaf3d006225d564e626746e33adacc649fd217d325cdac3ae2c50d7ce4e74c72374407be67da20dc9533c99ced9c17e1c8bc676a835098c032db805465b0b9ca69de073d3925f727b5049940afa34c530b7d076e59dc0431928a9308bdf14846a50a710f72e4b5bf74cc76da052ccd8bb05f8e77929ada41923afde221c1f56c8620a7f41f591f6989ee7ff91693f6b0b67bdb56f0e3fa666071f625b69411f10192b1da2ac6028755b6fcafd0bf7c4978c00dde221f6309bee2a1c4e26dae79a17d283d59afeea9836cfca7c7e0283caa83254f96629576dda907297e1750fb23cf8dc74b5fbc41989b83aaf856a963244ea4a418cda410bf63b617c7", 0x6, 0x40, 0x8f, 0x5, 0xfb, 0x3}, r4}}, 0x128) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x9}, 0xc) open$dir(&(0x7f0000000480)='./file0\x00', 0x402, 0x8) r7 = add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r7, &(0x7f0000000180)=""/163, 0xa3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) tkill(r8, 0x30) r9 = socket$caif_seqpacket(0x25, 0x5, 0x1) write(r9, &(0x7f0000000740)="30f4ea9083951ada45a1a831b3a03b32028e22b8674600a68580cd531892e76a759ef8da671a424e6871349fc0957ce358d3d7a76a7f151adb5afb01738fb4dea2ce11fb80fee3c4d44117c8825de878ebabb46c32fa7d280dfd08128fb2785334c79b092354292363084a77fdad559048d1de2a1adfd13947bb5867c85dd93238c58af450d9093a8384425bafc16f90f03e2b0fc49edd693f52010ebfe627422468aa9d39e2c19020062da876959f874669440cf4879f19298cd9b3c7a342aa561d0106698b8c3343f98725ded692da588e5a3221c690c4730083511e4976e0cac657364438a39167a8bebbcd52c2e78ff9c26351fad7f2c32536bde944a3b0ff573d3e42", 0x105) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) setsockopt$inet6_dccp_buf(r5, 0x21, 0x0, &(0x7f0000000240)="9aaeec30808832bf86fbb6bde7fadbde181711de8822d96564e89dc3cf1a390ee5c3c4d2ff1ba9dc78aec0859e9d1a95288f18e375456b0da84a4f51564508df44e5a7ffeef38546e162dda63effb5ab592583eb3446548fc7474b0aa9a3be2f5a8c6faa107a30", 0x67) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$vhci(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="0476efaae39a32954b7afdd17ad2e2d4c377f87ce81f81b19c7c73f38326fc96d4845f8378b1f9e25d870675b0cc2bb904424504a5fc445b5ef8caefb68d54c3c82919712db91bb24b6a4b1ce0c6d9c589a445c2e1d69600b082c2946fcf474552483404282a"], 0x66) 03:43:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)="297811946c967ca842281d7ebe13501de0d997b0e056aaa4c274c1ef50287a71658890e0e376f67a25e006fcdd3e99060f2b174381dac33ce44c9060ac386df52036828f410da5fcbfe33faeecf94111362003fdf382cc7b4625c4be94d1ffe082e88fe4", 0x64) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = socket(0x10, 0x800000000080002, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r7, 0x1, 0x70bd2c, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x80, @link='syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, [""]}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r7, 0xe00, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080a9}, 0x4040040) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) signalfd4(r4, &(0x7f0000000000)={0x4}, 0x8, 0x80000) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080), 0x4) 03:43:23 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x11011, r2, 0x0) mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x0) [ 1172.044960][T23756] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 03:43:23 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023984708000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1172.138269][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.144051][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:23 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000), 0x43578cf5) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x9f3, 0x200, 0x0, 0x9, 0x4, 0x80000001, 0x1, r6}, &(0x7f00000000c0)=0x20) ptrace(0x4206, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_DO_IT(r7, 0xab03) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000080)={0x101, 0x0, 0x2017, 0x1, 0x8001, {0x7f, 0x20}}) r3 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r3, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) 03:43:23 executing program 5: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x9) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') prctl$PR_MCE_KILL(0x21, 0x1, 0x3) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="b0190000850afe161329a176634a7bdf8a6825e48595d49b415cb106de5caa71572ca1ec8f97830af354c5536db54eee755d94de12408af5b8b2c77830d67d3e2b6f1e944646639ff1ca367f13fd4861e9bc1e5febf6df45ebe36c8a116408377b06244e4b2edcbb4f916aa4ddce49aa4ff4be3d2e4bb2a0f52b14f043bde15e0616529097942e6bb294ae2aa38dc7561a7732f3415afe7c9d6223cb210a4aec945a7991422d236490b4e557c3dee35ef170a336ad7febf0018d75479a65421e10ca76e354100e451ac8d7149305a092ab635312745b32e5", @ANYRES16=r8, @ANYBLOB="100325bd7000fedbdf2507000000090005000300000008000500ff840f88cf4199c416ffffff5c000300080004000600000008000500ac1e0101080007004e240000080004000100000014000200626f6e64300000"], 0x3}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x14, r8, 0x108, 0x0, 0x25dfdbfc}, 0x14}}, 0x4000000) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r8, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x13}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f44}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r9, 0x0) 03:43:23 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB='clear_cache,enospc_febug,\x00']) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:23 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:24 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x480002, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x1, 0x7ff, 0x0, 0x7fffffff}, 0x10) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:24 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000239b4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 03:43:24 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0='bpq0\x00', 0x6, 'syz1\x00', @bcast, 0x8, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:24 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0x68d4, 0x200000, 0x0, 0x0, 0x1, 0x5, 0x20, 0xe43c, 0x80000000000005, 0x4, 0x5, 0xffffffff, 0x9, 0x6, 0x8, 0x200], 0x0, 0xc0050}) r1 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r1) ptrace$getsig(0x8, r1, 0x0, 0x0) 03:43:24 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000239c4708000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 03:43:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x2, 0x10) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000000000)=""/19) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 03:43:24 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:24 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000aaa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x2, 0x8000, 0x1}) 03:43:24 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mq_open(&(0x7f0000000480)='bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', 0x0, 0x3d, &(0x7f00000004c0)={0x8, 0x9, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x68}) r8 = syz_open_dev$cec(&(0x7f0000000500)='/dev/cec#\x00', 0x0, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) fcntl$dupfd(r8, 0x406, r14) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r15 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r15, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:24 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023006808000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:25 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023006808000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:25 executing program 4: clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r4, 0x0, r3) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e24}}) write(r2, &(0x7f0000000080)="5ce7e2e13fa790e5da9d3b65ef5d076d72f1134a575285be12a59bdba2f2b16749b9e74ad062071c500b2d5d4ad46f66829cc36a42d40c6eca0faeb7d6ab4b3f235e14f116d301ea5fa1a7f431671b34d0602179863159c76ed7d6f2a70aedcb745808ebba5509d6763b5220a741230adf7dbf56f2464d10cf73ea8af502029b4167c5067df9cb38c64e010044bf8ef0", 0x90) ptrace(0x4206, r0) accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0)=0x10000004, 0x1c0) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1173.690591][T24229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.698888][T24229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.811784][T24338] IPVS: ftp: loaded support on port[0] = 21 [ 1174.699281][ T7678] device bridge_slave_1 left promiscuous mode [ 1174.705526][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.778980][ T7678] device bridge_slave_0 left promiscuous mode [ 1174.785171][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.428432][ T7678] device hsr_slave_0 left promiscuous mode [ 1175.468387][ T7678] device hsr_slave_1 left promiscuous mode [ 1175.515120][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1175.529344][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1175.545746][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.618545][ T7678] bond0 (unregistering): Released all slaves [ 1175.754400][T24445] IPVS: ftp: loaded support on port[0] = 21 [ 1175.805701][T24445] chnl_net:caif_netlink_parms(): no params data found [ 1175.834335][T24445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.841512][T24445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.849453][T24445] device bridge_slave_0 entered promiscuous mode [ 1175.856908][T24445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.864291][T24445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.872113][T24445] device bridge_slave_1 entered promiscuous mode [ 1175.888850][T24445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.939611][T24445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.958041][T24445] team0: Port device team_slave_0 added [ 1175.964995][T24445] team0: Port device team_slave_1 added [ 1176.020584][T24445] device hsr_slave_0 entered promiscuous mode [ 1176.061539][T24445] device hsr_slave_1 entered promiscuous mode [ 1176.120859][T24445] debugfs: Directory 'hsr0' with parent '/' already present! [ 1176.136352][T24445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.143509][T24445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.150856][T24445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.157962][T24445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.212963][T24445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.242405][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1176.255503][T19183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.281450][T19183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.305878][T24445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.322566][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1176.331715][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.338863][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.364025][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.372817][T19183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.379917][T19183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.389083][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1176.397795][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1176.407108][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1176.415806][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1176.426410][T24445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.437974][T24445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1176.445811][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1176.463543][T24445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.471565][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1176.479591][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1176.656226][T24456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.663716][T24456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.793687][T24457] bond0: (slave bond_slave_1): Releasing backup interface 03:43:28 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffea6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0xfffffffffffffffe, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffeffffffffb, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0xfffffffffffffd5b, 0x0, 0x40014, &(0x7f0000001780)=ANY=[@ANYRESHEX]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:28 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:28 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004702000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:28 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="c5d223f4400a4d49cf944f59a30fbb044ca94c3f6ca47c3e74866e269ae9d69ce89fad0ad41175c8873c70dd81664e97fe33eb2ce4b7e97017b01ac2cade279630403a5e886f238c2f47e56c39bf655536c7049417acb94df7567a7fe850e9d747cf8151605ab227c62d03ab187991fc94b0dac9ba0c85a2e1936b38c804d843c8afba4d57f83e88b5fa049c62bf7c058e28c6f6f72917de0e55854296c06050", 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETXW(r5, 0x5435, &(0x7f0000000240)={0x4, 0xfff9, [0x2, 0xeb, 0x3, 0xffff, 0x9a1], 0x7ff}) finit_module(r2, &(0x7f00000001c0)='vboxnet0\x00', 0x1) ptrace(0x4206, r0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f00000000c0)="d1b8af8a9c6ba7d0f26e4be76069e9f3fa6f26ae2119ae1f77b5b7fd4777a9900d23f9f0d2dcc65fc2ab68d60374ede8ad9e29997a34d856c095e234c6d3cb7d5567787542dd6bad072cb7a92425cb56a818fdf738796e4e984ea4483fc4224321eaa01fc7a2894f9faf1822df0a5e0c1672beb8c5af115bccdb3b0e6d38cd3c410fde544632cd2441eeab1c697348d6e10a359cdc9c670bc83aa893030597b2e65bafb9f484dc1c340692b31e023ae6e31729eecea4961d70f7825fc23f3ca3e63241d3978bbe53247285a60fc8f2837bfcd42aab20223f9535889c251a3835589e53a272e989af91ffcb0fb0898c7db2", 0xf1) ptrace$getsig(0x8, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000100", @ANYRES16=0x0, @ANYBLOB="000000000000000000000400000008000200040000000800030000000000"], 0x24}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000000003000000c70000003b000100ffff0000000000000000b5060800fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f0000000200)) [ 1176.936967][T24464] netlink: 99 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1176.952299][T24466] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1177.122838][T24572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0x80000001, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)) bind$rds(r4, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) 03:43:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) bind$xdp(r2, &(0x7f00000004c0)={0x2c, 0x2, r3, 0x2c}, 0x10) clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @multicast1}, &(0x7f0000000100)=0xc) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r4) ptrace$setregs(0xf, 0xffffffffffffffff, 0x2, &(0x7f0000000040)="53199603ebc31b35a6743165815b8c39f13365ffecbb6228507ffefc5fe8526a0ebbb1c8de025ade86ff0342c6c6ea956a21f1e368164d910ea5932ff334146c217f44ff06117d3a9335cbd0eabba7f17d96be23428a6003db05fbbc19aee1cb04950777f0ed") ptrace$getsig(0x8, r4, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x442000, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) 03:43:28 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:29 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @null, 0x9, 0x3, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:29 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004703000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:29 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xec2a8582789155ce}, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 03:43:29 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_opts(r4, 0x0, 0x12, &(0x7f0000000000)=""/170, &(0x7f00000000c0)=0xaa) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:29 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="73e01c92f1455265a1fb"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000240)={'bond0\x00\xe1\x00\x01\x00', @ifru_mtu=0xffffffff}) r10 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:29 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004704000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x581380) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000080)={0x20, 0x2, 0x4c2, 0x80, 0x7}) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 1178.109089][T24799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1178.138288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.144074][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.339850][T24805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1178.378269][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.384048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.729457][ T7678] device bridge_slave_1 left promiscuous mode [ 1178.735742][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.789012][ T7678] device bridge_slave_0 left promiscuous mode [ 1178.795167][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.708507][ T7678] device hsr_slave_0 left promiscuous mode [ 1179.758393][ T7678] device hsr_slave_1 left promiscuous mode [ 1179.834680][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1179.844813][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1179.854730][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.911989][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.968398][ T7678] bond0 (unregistering): Released all slaves [ 1180.055806][T24809] IPVS: ftp: loaded support on port[0] = 21 [ 1180.126749][T24809] chnl_net:caif_netlink_parms(): no params data found [ 1180.179493][T24812] IPVS: ftp: loaded support on port[0] = 21 [ 1180.218012][T24809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.225161][T24809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.235638][T24809] device bridge_slave_0 entered promiscuous mode [ 1180.258315][T24809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.265364][T24809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.276600][T24809] device bridge_slave_1 entered promiscuous mode [ 1180.324277][T24809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.347064][T24812] chnl_net:caif_netlink_parms(): no params data found [ 1180.360752][T24809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.399242][T24812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.406407][T24812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.417875][T24812] device bridge_slave_0 entered promiscuous mode [ 1180.430656][T24809] team0: Port device team_slave_0 added [ 1180.436370][T24812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.443458][T24812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.454906][T24812] device bridge_slave_1 entered promiscuous mode [ 1180.462429][T24809] team0: Port device team_slave_1 added [ 1180.530689][T24809] device hsr_slave_0 entered promiscuous mode [ 1180.618897][T24809] device hsr_slave_1 entered promiscuous mode [ 1180.665251][T24812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.675778][T24812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.698745][T24812] team0: Port device team_slave_0 added [ 1180.706475][T24812] team0: Port device team_slave_1 added [ 1180.716152][T24809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.723206][T24809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.730522][T24809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.737548][T24809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.812507][T24812] device hsr_slave_0 entered promiscuous mode [ 1180.868700][T24812] device hsr_slave_1 entered promiscuous mode [ 1180.910908][T24812] debugfs: Directory 'hsr0' with parent '/' already present! [ 1180.933267][T24812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.940299][T24812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.947593][T24812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.954796][T24812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.993381][T24809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.011887][T24812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.025677][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1181.034234][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.042385][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.052688][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.060693][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.074825][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1181.082613][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1181.092023][T24812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.100337][T24809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.113745][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1181.122472][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1181.131052][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.138157][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.146017][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1181.154575][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.163058][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.170137][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.177891][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.190639][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.199610][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1181.208000][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1181.216551][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.223585][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.288625][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.297319][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.305890][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1181.314646][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1181.323216][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.330368][ T7607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.338031][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1181.346895][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1181.356207][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.391641][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1181.400123][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1181.409330][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1181.419873][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.428854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.469113][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1181.477550][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1181.486308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.494526][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.502912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1181.511500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1181.519869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.528083][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1181.536248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1181.544803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1181.553687][T24812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1181.567140][T24809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1181.613005][T24812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.620860][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1181.628610][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1181.636006][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1181.643746][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1181.654820][T24809] 8021q: adding VLAN 0 to HW filter on device batadv0 03:43:33 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:33 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004705000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='#de\x00\xe0\xff\x0f\x00\x00\xf0\xff#\x00', 0xfffffffffffffffe, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:33 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004704000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:33 executing program 4: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x2) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000040)={0x10000, "88515e9b670b950bc956faa2ac850361462533d0b5bfd0f99f9d69e862dde73f"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={r3}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="04008f76a5ce45f869312bfa977300"/26], 0x1e) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x7, 0x1}, &(0x7f0000000140)=0xc) clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x3}, 'port0\x00', 0x4, 0x80000, 0x4, 0x8, 0x0, 0x1, 0x7, 0x0, 0x6, 0x9}) write(r6, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r4) tkill(r4, 0x31) ptrace$getsig(0x8, r4, 0x0, 0x0) [ 1181.850278][T24825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.858748][T24825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.995410][T24840] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1182.005105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1182.005314][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1182.018318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1182.024092][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8000, 0x4, 0x4, 0x20000000, {0x77359400}, {0x5, 0x0, 0x3, 0x2, 0x6, 0x6, "a51aac6c"}, 0x0, 0x4, @fd=0xffffffffffffffff, 0x4}) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x28) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r8, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r7, r8, &(0x7f0000000000), 0xffff) fcntl$addseals(r8, 0x409, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r8, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r10}]}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r12, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r11, r12, &(0x7f0000000000), 0xffff) fcntl$addseals(r12, 0x409, 0x8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r12, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r14}]}, 0x2c, 0x0) setresgid(0xee01, r10, r14) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r6, 0x0) 03:43:33 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1182.549542][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1182.555562][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1182.622762][T24825] bond0: (slave bond_slave_1): Releasing backup interface 03:43:34 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) sched_getparam(r3, &(0x7f0000000080)) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) ptrace(0x4206, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fcntl$getown(r5, 0x9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000000)={0xc800000000000000, 0x148a4694a6c8e918, 0x81, 0x1, 0x15}) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:34 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1183.099507][T24946] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1183.152178][ T7678] device bridge_slave_1 left promiscuous mode [ 1183.166281][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state 03:43:34 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561835f63616368652c75672c00a75a542035cbbc512bff31276b96dae3d5fbb53c41efdd3fb7e98e692067de1fa66aa4c8"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:34 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x1, [0x0]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:34 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x190}}, 0x20040051) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x5, 0x200, 0x7}, {{0x0, 0x7530}, 0x2, 0x1, 0x101}, {{0x77359400}, 0x16, 0xfff, 0x80000001}, {{0x77359400}, 0x38, 0x3, 0x7f}, {{0x77359400}, 0x16, 0x2, 0x3ff}, {{0x77359400}, 0x16, 0x7, 0x100}], 0x90) [ 1183.238949][ T7678] device bridge_slave_0 left promiscuous mode [ 1183.252499][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.058570][ T7678] device hsr_slave_0 left promiscuous mode [ 1184.098321][ T7678] device hsr_slave_1 left promiscuous mode [ 1184.145490][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1184.155554][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1184.168498][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.208526][ T7678] bond0 (unregistering): Released all slaves 03:43:35 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004704000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:35 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004706000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$netlink(r3, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x180000}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = getpgrp(0xffffffffffffffff) fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x2, r8}) bind$rds(r4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x0, 0x810, r4, 0x3fcdb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$ASHMEM_GET_SIZE(r11, 0x7704, 0x0) 03:43:35 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write(r2, &(0x7f0000000300)="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", 0x12b) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 03:43:35 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:35 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="636c6561725f63616300042c656e6f7370635f2b656275672c00"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = accept4$rose(r14, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f00000003c0)=0x3d37fb2f5c91a751, 0x80000) preadv(r15, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:35 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c5f64696275672c0000000004000000000100000000000000a69a3bc87d82b2110328dbfc6fabf2f6f070d453e4d306b322456d81761dde7939cecc1d00e8374cae5231907695951a6e"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1184.534967][T25189] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1184.618282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.624078][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:36 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_EDID(r5, 0xc0285629, &(0x7f00000000c0)={0x0, 0x2, 0x9, [], &(0x7f0000000080)=0x6}) [ 1184.785512][T25248] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:36 executing program 4: syslog(0x3, &(0x7f0000000000)=""/169, 0xa9) clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$rfkill(r2, &(0x7f00000000c0)={0x9, 0x0, 0x2, 0x1, 0x1}, 0x8) r3 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r3) ptrace$getsig(0x8, r3, 0x0, 0x0) 03:43:36 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004707000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1185.178345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1185.184133][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:36 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:36 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) futimesat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0x2710}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)) bind$rds(r4, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) r6 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r6, 0x2, 0x10) semctl$GETNCNT(r6, 0x2, 0xe, &(0x7f0000000080)=""/119) 03:43:37 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="73e01c92f1455265a1fb"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000240)={'bond0\x00\xe1\x00\x01\x00', @ifru_mtu=0xffffffff}) r10 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:37 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:37 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004709000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x115200, 0x0) bind$rds(r2, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x21d, 0x2, 0x7f, 0x4}, {0x7fff, 0x0, 0x0, 0x869}, {0x3, 0x1d, 0xe5, 0x1}]}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 1185.892539][T25429] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1186.058272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.064061][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:37 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41bf, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x41d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/224, 0xe0}) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1186.138759][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.144778][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.275065][T25534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.283337][T25534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.745251][T25551] IPVS: ftp: loaded support on port[0] = 21 [ 1187.795668][T25551] chnl_net:caif_netlink_parms(): no params data found [ 1187.820599][T25551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.827710][T25551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.835508][T25551] device bridge_slave_0 entered promiscuous mode [ 1187.842899][T25551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.850040][T25551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.857612][T25551] device bridge_slave_1 entered promiscuous mode [ 1187.962489][T25551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.973244][T25551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.989997][T25551] team0: Port device team_slave_0 added [ 1187.996507][T25551] team0: Port device team_slave_1 added [ 1188.070716][T25551] device hsr_slave_0 entered promiscuous mode [ 1188.098622][T25551] device hsr_slave_1 entered promiscuous mode [ 1188.168539][T25551] debugfs: Directory 'hsr0' with parent '/' already present! [ 1188.246187][T25551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.256407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1188.266314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1188.274200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1188.330847][T25551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.341027][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1188.349638][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1188.358008][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.365112][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.373436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1188.426073][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1188.434849][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1188.443216][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.450272][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.508000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1188.527308][T25551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1188.537784][T25551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.550596][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1188.559959][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1188.568864][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1188.577283][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1188.586190][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1188.649298][T25551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.657696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1188.669034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1188.677001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1188.685199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1188.910805][T25561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.918542][T25561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.037085][T25562] bond0: (slave bond_slave_1): Releasing backup interface 03:43:40 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="636404000068652c656f6f9493413a64656265df709c672c7d9c50425d83ae63122134ab0ebb120be14eebbbe62462cece772999302f3932051914845f911cbf2f1006e91872bc1fc41c44622bc8c112"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) preadv(r11, &(0x7f00000003c0), 0x0, 0x8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r6}}, 0x18) clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80000, 0x0) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000140)=0x3) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r7) ptrace$getsig(0x8, r7, 0x0, 0x0) 03:43:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x6bddfe9030d968a4, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000440)) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = accept4$rose(r1, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@null, @rose, @default, @default, @null, @netrom]}, &(0x7f00000000c0)=0x40, 0x80800) fstat(r7, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x81800) mmap(&(0x7f0000dea000/0x2000)=nil, 0x2000, 0x1000002, 0x8010, r8, 0x737b000) 03:43:40 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300470a000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:40 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:40 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="73e01c92f1455265a1fb"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000240)={'bond0\x00\xe1\x00\x01\x00', @ifru_mtu=0xffffffff}) r10 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1189.182657][T25568] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1189.338295][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1189.344076][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:40 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="4eb4390b18c533ab753a1bff0b80da0b0aad962dd62d1a04b10f500e881f5c48051dea2b426deef173fe5c881bb0432665b662a944ca04410781d29ae2d290f735a9fba3b3", 0x45, 0x4004000, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @default]}, 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x202000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000140)={0x6, 0x537b, 0x1f, 0x8000}) 03:43:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000000)=""/61) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x2000) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r6 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r6, 0x0) 03:43:41 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x8000000000000000, 0x6, 0x4, 0x8, 0x0, 0x1000}, r2, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) setsockopt$rose(0xffffffffffffffff, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="26d89384c6df59ad5cae00"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(0xffffffffffffffff, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x1000) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:41 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040), 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1189.759617][ T7] device bridge_slave_1 left promiscuous mode [ 1189.765818][ T7] bridge0: port 2(bridge_slave_1) entered disabled state 03:43:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0xf8, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000a69000/0x3000)=nil, 0x3000, 0x200000e, 0x490, r2, 0x5747000) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x2}, 0x28, 0x3) [ 1189.829104][ T7] device bridge_slave_0 left promiscuous mode [ 1189.877926][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 03:43:41 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300470b000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:41 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561855f63616368652c656e6f73706eb964656275672c0046d48c47d90e6c9ef41af4c366216e315b117009c46a550648b199862458bef8d073b336717f030681621588a20b6571ae9fdf768885b5e6e4afa9c6ba020b5f4f949a284b3d02f35bd60ecc8ff6f0d62cee7291444f1e11647614976187afa7df4426d6bf1e2c21"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1190.000804][ T7] device bridge_slave_1 left promiscuous mode [ 1190.010424][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.069938][ T7] device bridge_slave_0 left promiscuous mode [ 1190.077475][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 03:43:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xfffff801}) io_setup(0x6, &(0x7f0000000000)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) 03:43:41 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300470c000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1190.288694][T25803] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:41 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r3, r2, 0xd, 0x2}, 0xd) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r4, &(0x7f0000000580)=r6, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000500)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e00)={r6, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)='vmnet0!keyring/:\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0x0, r1, 0x0, 0x5, &(0x7f0000000440)='f2fs\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='vboxnet0^J!vboxnet0posix_acl_access\x00', r7}, 0x30) sched_setattr(r8, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x3f, 0x10000, 0x7f, 0x4, 0x5}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r10) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:42 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1190.858283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.864073][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.100392][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.106690][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1192.558933][ T7] device hsr_slave_0 left promiscuous mode [ 1192.608337][ T7] device hsr_slave_1 left promiscuous mode [ 1192.655092][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1192.665163][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1192.675135][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.722003][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.788841][ T7] bond0 (unregistering): Released all slaves [ 1192.918568][ T7] device hsr_slave_0 left promiscuous mode [ 1192.978322][ T7] device hsr_slave_1 left promiscuous mode [ 1193.044484][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1193.059092][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1193.072446][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.140795][ T7] bond0 (unregistering): Released all slaves [ 1193.262102][T25918] IPVS: ftp: loaded support on port[0] = 21 [ 1193.269743][T25920] IPVS: ftp: loaded support on port[0] = 21 [ 1193.274007][T25913] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1193.402953][T25918] chnl_net:caif_netlink_parms(): no params data found [ 1193.422619][T25920] chnl_net:caif_netlink_parms(): no params data found [ 1193.517392][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.527820][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.535686][T25920] device bridge_slave_0 entered promiscuous mode [ 1193.545972][T25918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.553703][T25918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.564986][T25918] device bridge_slave_0 entered promiscuous mode [ 1193.572364][T25920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.584076][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.592127][T25920] device bridge_slave_1 entered promiscuous mode [ 1193.602429][T25918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.609843][T25918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.617508][T25918] device bridge_slave_1 entered promiscuous mode [ 1193.642495][T25920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.665226][T25920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.676313][T25918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.701075][T25920] team0: Port device team_slave_0 added [ 1193.708171][T25918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.731548][T25920] team0: Port device team_slave_1 added [ 1193.737958][T25918] team0: Port device team_slave_0 added [ 1193.749524][T25918] team0: Port device team_slave_1 added [ 1193.810307][T25920] device hsr_slave_0 entered promiscuous mode [ 1193.861694][T25920] device hsr_slave_1 entered promiscuous mode [ 1193.980702][T25918] device hsr_slave_0 entered promiscuous mode [ 1194.020950][T25918] device hsr_slave_1 entered promiscuous mode [ 1194.078468][T25918] debugfs: Directory 'hsr0' with parent '/' already present! [ 1194.093662][T25920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.100706][T25920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.107948][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.114985][T25920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.137722][T25918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.144819][T25918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.152223][T25918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.159252][T25918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.199524][T25918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.213200][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1194.221664][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.229805][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.237780][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.246113][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.264694][T25918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.273884][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1194.283017][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1194.294472][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.301719][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.318038][T25920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.336119][T25918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1194.346926][T25918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1194.358474][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1194.367116][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1194.375606][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.382648][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.390606][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1194.399358][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1194.407995][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1194.416694][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1194.425581][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1194.434300][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1194.442824][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1194.451271][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1194.459887][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1194.468173][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1194.476631][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1194.484678][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1194.497709][T25920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.508476][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1194.516402][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1194.527103][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1194.535616][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1194.544083][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.551171][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.569718][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1194.578737][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1194.587103][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.594205][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.602322][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1194.611312][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1194.618839][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1194.626159][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1194.639340][T25918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.652791][T25920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1194.664147][T25920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1194.675845][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1194.684837][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1194.694398][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1194.703244][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1194.711962][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1194.720465][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1194.729231][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1194.737657][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1194.745994][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1194.753942][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1194.769433][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1194.776875][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1194.786452][T25920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.964941][T25941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.974311][T25941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.097501][T25937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.105761][T25937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.299018][T25941] bond0: (slave bond_slave_1): Releasing backup interface 03:43:46 executing program 0: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e7b0dcc3daa5520d15393464e02ff4091800eb0c280a1d56bb729bd3378032a431db705eb5b2e2b951872ba3aec4f8eabee8263265ac087ecd8645ab029395eb39974ae562e72ab946b87fc14b688f5b4c456cb467e285de87dd3c9510a1aadeaf28fb9b710ecf7fdd4240aece1996b95aa33f7a702cf4314043558b94402b9ccfe9622f03a1809e22cb6a514bcbafe8cfc5e77e85c30c6f516eb5ce41f2f2ff33273edb89b06953b3ba545513b0f358d4553053807f609db7928b73b60c04bb9923de8272017f1dc2e6112fd9f7e967fc260299ba5ea9fb0d3fe1befc431917451d1f630256c08b8afbfa1c09afeac772977a2b01d841e5108d5db00f75866b7b295e96eb336d63ddf4fd217d929bde6a13695ecfa3aa958341f029c2009e91d2d4279af3cd57059a15b68956aa5aaf535a3754bcf9b637185d169b132f200c77a9bb735dd2811ece8f39092950a7e127fc47a78ccda231002246ec19b8a6376e0c1cff2aa8d30c8c7475bca6780028fcc73e0f46b3c4f3d59e2006f4bb84b5c46b7cc096a6570bb963196a00000000000000000000000000000000bbcba8b33e7b553900bbb6d986ad0f8847ab01f800e1997af2dd1621259e80501570504272aa68b13c9958ac628b6b1024aefe54222c4901b6819e14754d7e7e4702c81083e8f3a516319ccf79b555141dd394abe823c3d8f66f52eb5ef2d90035d89cfb4649c368bc032bb371"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r3, r2, 0xd, 0x2}, 0xd) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r4, &(0x7f0000000580)=r6, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000500)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e00)={r6, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)='vmnet0!keyring/:\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0x0, r1, 0x0, 0x5, &(0x7f0000000440)='f2fs\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='vboxnet0^J!vboxnet0posix_acl_access\x00', r7}, 0x30) sched_setattr(r8, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x3f, 0x10000, 0x7f, 0x4, 0x5}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r10) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:46 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x565100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000080)={0x8, 0x81, 0x47, 0x5}, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:46 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000000)=0x9f) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:46 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300470d000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1195.498968][T25954] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1195.581438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1195.587639][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:47 executing program 4: clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x10, 0xffffffffffffffff) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r4, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) 03:43:47 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB='clear_\bache,enospcMdebug,\x00']) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:47 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:47 executing program 4: clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$getsig(0x8, r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r2, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000400)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) ptrace$getsig(0x4202, 0x0, 0x6, &(0x7f0000000000)) 03:43:47 executing program 0: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r3, r2, 0xd, 0x2}, 0xd) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r4, &(0x7f0000000580)=r6, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000500)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e00)={r6, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)='vmnet0!keyring/:\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0x0, r1, 0x0, 0x5, &(0x7f0000000440)='f2fs\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='vboxnet0^J!vboxnet0posix_acl_access\x00', r7}, 0x30) sched_setattr(r8, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x3f, 0x10000, 0x7f, 0x4, 0x5}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r10) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1196.212783][T26170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1196.223277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.223447][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_flags=0x200}) 03:43:47 executing program 0: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r3, r2, 0xd, 0x2}, 0xd) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r4, &(0x7f0000000580)=r6, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000500)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e00)={r6, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)='vmnet0!keyring/:\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0x0, r1, 0x0, 0x5, &(0x7f0000000440)='f2fs\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='vboxnet0^J!vboxnet0posix_acl_access\x00', r7}, 0x30) sched_setattr(r8, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x3f, 0x10000, 0x7f, 0x4, 0x5}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r10) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:47 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300470e000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:48 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x91000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write(r2, &(0x7f0000000100)="ae7f4fe4af65ee19669f162c6c088d3b26cea726690f8461a8c507c56c16ec58e38a4675cfc367c1bd75ae828290d6373e03b094b510ef4845d3560593d20af4e9cedf94e0fc9e29b4c366cb9a6594c16b8e47b7e3a7f6a4bb05ef8504f717bed3f02b300deeb3636ef21666ef3bd7f9bbaa15f39266ed00000000000000", 0x4) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1196.714857][T26384] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:48 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000000)) 03:43:48 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:48 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="636cdd54ee536368652c656e6f7370635f64656275672c4e000073cc74704252684b07067ab76f0d9ed1c76d2facd9a1"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f00000003c0)=0x9, 0x800) preadv(r9, &(0x7f0000001380), 0x207, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(r11, 0x0, 0xffea, 0x9) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1196.938521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1196.944344][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:48 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x8, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="636c650e3b0f18546368fcc1b78c927475852c656e"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8937, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_map={0xffff, 0xff, 0x7fff, 0x8, 0xff}}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:48 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202b2d70726f63656d312073656375726974796367726f75701a4c715544b2f59bd1f1f56c1a05f2171c220f029dae747320e1791cd61b265aa424f3c5cb1623990867c87ef8a9c87287c4878f792e434825565d9f12230aa8bb3a2f1344e7def13bb5774d6990627f5ad89eb2bb22faf28508ee46ce234eca497aa3ceebc033"], 0x8a) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r3, &(0x7f0000000000), 0x0) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:48 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004710000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1197.383442][T26602] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1197.408884][ T7] device bridge_slave_1 left promiscuous mode [ 1197.415076][ T7] bridge0: port 2(bridge_slave_1) entered disabled state 03:43:49 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1197.499690][ T7] device bridge_slave_0 left promiscuous mode [ 1197.507151][ T7] bridge0: port 1(bridge_slave_0) entered disabled state 03:43:49 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) r2 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$jfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000000780)=[{&(0x7f0000000200)="939dca2bd1ab3ba735fd2dce4e8263a6bbbd11e278d6aec1784d699ba4df7d48df0f22567e4d7845afc86e1695879cf08bc4aa49f5501e63962495cf930a35aeff74a6a9e50ec9ee04fd2ce41ce6d88ace6ddcf1faaa", 0x56, 0x7}, {&(0x7f0000000100)="abeba5c2bb95c2ec04cf23783eab15404d78d7124e849b7e413cde9e54888ab441ee552f559febc0acd6eaceccbbbd09b86fec71348e723fab628ab0b6", 0x3d, 0x5}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000000340)="558acfbe1646ec691d62f39fe362734dcb7114a8d5b3a6608c79319219e48d5573a7372f8c43156cca1994f56097ad6cd0c867ec19c66392daf411cd314fbdbd434b36f19f4f732dbe241cdc9a29d363", 0x50, 0x2}, {&(0x7f00000003c0), 0x0, 0xffffffff}, {&(0x7f0000000440)="4fc356603c12e98a75f62855748cf90b9aa65fb932238208d78b1e984813db8f4d6ccf9e8531d8fea29477ed78450d2e71166447bfd85516d86e5403ccef5143d4a696325caa5b2b7c72b687d937e5537b087cc9034e79271ed10927fb70e4a39053011ef9e6549de3dcf5e10d3d943380d6e4f007e43be0e8545f011fdb7827ad7b5a70d41b4c731c9f3b38f585f00a56d50571bc3f6fd31ece1d", 0x9b}, {&(0x7f0000000600)="36ced7819f5f3711388dfafdd1dea4b58422f0fda24f562380b7737689e3aa357d7e34176ee66890a57253370ed26eb84704e0f7fd36a837fbc861fed1c5544ae9d57df355b3d4d070d0ada33ca89e2e0b0bdbc03e4826073484aa03bbb6fd1bb5f54286f76f404e4c545314a24956ec45bd78c9fc2b746d078e2bf3120b4fd829f94339f177deb1c25b929ada50ae802664fcfb9af86cabdeeb6bc2e55d197309440964a759a28e145c5794b0e7cf2d8e8534485b8e67f92572", 0xba}, {&(0x7f00000006c0)="78c94f35055e36b6f1e87f9c0c1937c8", 0x10, 0xc64f}], 0x4, &(0x7f0000000b00)={[{@umask={'umask'}}, {@discard='discard'}, {@discard_size={'discard', 0x3d, 0x100000001}}], [{@fowner_lt={'fowner<'}}, {@euid_lt={'euid<', r3}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ppp0trusted'}}, {@euid_gt={'euid>', r4}}, {@uid_lt={'uid<', 0xee01}}, {@smackfsfloor={'smackfsfloor'}}, {@obj_type={'obj_type', 0x3d, '|'}}]}) r5 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$jfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000000780)=[{&(0x7f0000000200)="939dca2bd1ab3ba735fd2dce4e8263a6bbbd11e278d6aec1784d699ba4df7d48df0f22567e4d7845afc86e1695879cf08bc4aa49f5501e63962495cf930a35aeff74a6a9e50ec9ee04fd2ce41ce6d88ace6ddcf1faaa", 0x56, 0x7}, {&(0x7f0000000100)="abeba5c2bb95c2ec04cf23783eab15404d78d7124e849b7e413cde9e54888ab441ee552f559febc0acd6eaceccbbbd09b86fec71348e723fab628ab0b6", 0x3d, 0x5}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000000340)="558acfbe1646ec691d62f39fe362734dcb7114a8d5b3a6608c79319219e48d5573a7372f8c43156cca1994f56097ad6cd0c867ec19c66392daf411cd314fbdbd434b36f19f4f732dbe241cdc9a29d363", 0x50, 0x2}, {&(0x7f00000003c0), 0x0, 0xffffffff}, {&(0x7f0000000440)="4fc356603c12e98a75f62855748cf90b9aa65fb932238208d78b1e984813db8f4d6ccf9e8531d8fea29477ed78450d2e71166447bfd85516d86e5403ccef5143d4a696325caa5b2b7c72b687d937e5537b087cc9034e79271ed10927fb70e4a39053011ef9e6549de3dcf5e10d3d943380d6e4f007e43be0e8545f011fdb7827ad7b5a70d41b4c731c9f3b38f585f00a56d50571bc3f6fd31ece1d", 0x9b}, {&(0x7f0000000600)="36ced7819f5f3711388dfafdd1dea4b58422f0fda24f562380b7737689e3aa357d7e34176ee66890a57253370ed26eb84704e0f7fd36a837fbc861fed1c5544ae9d57df355b3d4d070d0ada33ca89e2e0b0bdbc03e4826073484aa03bbb6fd1bb5f54286f76f404e4c545314a24956ec45bd78c9fc2b746d078e2bf3120b4fd829f94339f177deb1c25b929ada50ae802664fcfb9af86cabdeeb6bc2e55d197309440964a759a28e145c5794b0e7cf2d8e8534485b8e67f92572", 0xba}, {&(0x7f00000006c0)="78c94f35055e36b6f1e87f9c0c1937c8", 0x10, 0xc64f}], 0x4, &(0x7f0000000b00)={[{@umask={'umask'}}, {@discard='discard'}, {@discard_size={'discard', 0x3d, 0x100000001}}], [{@fowner_lt={'fowner<'}}, {@euid_lt={'euid<', r6}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ppp0trusted'}}, {@euid_gt={'euid>', r7}}, {@uid_lt={'uid<', 0xee01}}, {@smackfsfloor={'smackfsfloor'}}, {@obj_type={'obj_type', 0x3d, '|'}}]}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r10, 0x0, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r13, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r12, r13, &(0x7f0000000000), 0xffff) fcntl$addseals(r13, 0x409, 0x8) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r13, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r15}]}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r17, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r16, r17, &(0x7f0000000000), 0xffff) fcntl$addseals(r17, 0x409, 0x8) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r17, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r19}]}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r21, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r20, r21, &(0x7f0000000000), 0xffff) fcntl$addseals(r21, 0x409, 0x8) r22 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r21, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r23}]}, 0x2c, 0x0) getgroups(0xa, &(0x7f0000000100)=[0xee01, r15, 0x0, r19, 0xffffffffffffffff, r23, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r26, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r25, r26, &(0x7f0000000000), 0xffff) fcntl$addseals(r26, 0x409, 0x8) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r26, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r28}]}, 0x2c, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [{0x2, 0x2, r4}, {0x2, 0x8, r7}, {0x2, 0x0, r8}], {0x4, 0x1}, [{0x8, 0x1, r11}, {0x8, 0x4, 0xee00}, {0x8, 0x4, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x4, r24}, {0x8, 0x1, r28}], {0x10, 0x2}, {0x20, 0x1381b44128b81e48}}, 0x6c, 0x2) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1197.668268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1197.674065][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1198.968457][ T7] device hsr_slave_0 left promiscuous mode [ 1199.008451][ T7] device hsr_slave_1 left promiscuous mode [ 1199.054450][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1199.064860][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1199.077209][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.139169][ T7] bond0 (unregistering): Released all slaves [ 1199.271686][T26713] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1200.076828][T26718] IPVS: ftp: loaded support on port[0] = 21 [ 1200.091998][T26716] IPVS: ftp: loaded support on port[0] = 21 [ 1200.174994][T26718] chnl_net:caif_netlink_parms(): no params data found [ 1200.224042][T26718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.231545][T26718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.242525][T26718] device bridge_slave_0 entered promiscuous mode [ 1200.256409][T26718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.263514][T26718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.271358][T26718] device bridge_slave_1 entered promiscuous mode [ 1200.372746][T26716] chnl_net:caif_netlink_parms(): no params data found [ 1200.390564][T26718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.402041][T26718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.483033][T26718] team0: Port device team_slave_0 added [ 1200.493607][T26718] team0: Port device team_slave_1 added [ 1200.505694][T26716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.512779][T26716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.520511][T26716] device bridge_slave_0 entered promiscuous mode [ 1200.527764][T26716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.534950][T26716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.542704][T26716] device bridge_slave_1 entered promiscuous mode [ 1200.630525][T26718] device hsr_slave_0 entered promiscuous mode [ 1200.678542][T26718] device hsr_slave_1 entered promiscuous mode [ 1200.718344][T26718] debugfs: Directory 'hsr0' with parent '/' already present! [ 1200.727493][T26716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.786941][T26716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.805989][T26716] team0: Port device team_slave_0 added [ 1200.812800][T26716] team0: Port device team_slave_1 added [ 1200.860536][T26716] device hsr_slave_0 entered promiscuous mode [ 1200.908584][T26716] device hsr_slave_1 entered promiscuous mode [ 1200.948395][T26716] debugfs: Directory 'hsr0' with parent '/' already present! [ 1201.020947][T26716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.027989][T26716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.035289][T26716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.042331][T26716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.125664][T26718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.189540][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1201.198829][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.206604][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.217458][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1201.225122][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1201.235247][T26716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.244839][T26718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.304437][T26716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.311891][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1201.321802][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1201.330595][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1201.339300][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1201.347616][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.354650][T10544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.362553][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1201.371199][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1201.379556][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.386555][T10544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.394529][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1201.458814][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1201.467494][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1201.476443][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.483482][T19184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.491457][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1201.510434][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1201.519354][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1201.528131][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1201.536964][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1201.545989][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1201.554897][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1201.563199][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1201.571583][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1201.580190][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1201.590918][ T7] device bridge_slave_1 left promiscuous mode [ 1201.597099][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.628920][ T7] device bridge_slave_0 left promiscuous mode [ 1201.635088][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.689729][ T7] device bridge_slave_1 left promiscuous mode [ 1201.695931][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.738907][ T7] device bridge_slave_0 left promiscuous mode [ 1201.745025][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.958549][ T7] device hsr_slave_0 left promiscuous mode [ 1203.048398][ T7] device hsr_slave_1 left promiscuous mode [ 1203.094092][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1203.103974][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1203.116941][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.177899][ T7] bond0 (unregistering): Released all slaves [ 1203.308650][ T7] device hsr_slave_0 left promiscuous mode [ 1203.348398][ T7] device hsr_slave_1 left promiscuous mode [ 1203.404645][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1203.414721][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1203.424542][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.471097][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.547001][ T7] bond0 (unregistering): Released all slaves [ 1203.644220][T26718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1203.651912][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1203.660351][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1203.669604][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1203.677817][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.684909][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.698338][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1203.707163][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1203.725043][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1203.736108][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1203.744979][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1203.753754][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1203.762702][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1203.773084][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1203.780633][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1203.793231][T26716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1203.804104][T26716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1203.816951][T26718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.824972][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1203.833535][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1203.842534][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1203.851030][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1203.859567][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1203.925794][T26716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1203.937391][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1203.945239][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1204.165681][T26740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.172892][T26740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.296681][T26734] bond0: (slave bond_slave_1): Releasing backup interface 03:43:56 executing program 4: clone(0x180000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getuid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = getpid() sched_setscheduler(r8, 0x5, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001640)=0x0) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r16, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r15, r16, &(0x7f0000000000), 0xffff) fcntl$addseals(r16, 0x409, 0x8) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r16, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r18}]}, 0x2c, 0x0) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r20, 0xae60) ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r20, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r21 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r22 = ioctl$KVM_CREATE_VM(r21, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r22, 0xae60) r23 = ioctl$KVM_CREATE_VCPU(r22, 0xae41, 0x0) ioctl$KVM_SET_REGS(r23, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r23, 0xae80, 0x0) ioctl$KVM_RUN(r23, 0xae80, 0x0) r24 = syz_init_net_socket$bt_l2cap(0x1f, 0x9bd852264a32a552, 0x0) r25 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r25, 0xae01, 0x0) r26 = epoll_create1(0x80000) sendmsg$netlink(r5, &(0x7f0000001840)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000300)={0x330, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x320, 0x35, [@generic="e33d62226d5dbeca0e338acf336efc0d3f544101395fe264c5f8a4d6a618ce02b2f36f0e961d71a8b02dc2e96854ca98b98348c5152d35511cdc7cca3701c5233aa9dfec56e1a85e805f9e070641d55e44ffb7eb2eb859eeb79e1fbef23f24b31b7c763e0a9cb993d711a2142303f70963118c7977c2897b574d17797fb2a3d74e3af0500e68e3806de73c6179ea7100d548fbaac2da01d6fea1aa", @generic="b232a94d3930195dccd5793e3b97929cf05376d4a7c8d41f4e541c4561308479f16a6e193c41610e4aee9f75da499541a90c8d421847c4ad28b7369d7b0d6017df097642f4b677a53fe5dfaefe45be514ab26f644b9e5d48def503a59eb2fa25829f727c88e1853a668f5fcd95ecbfe71de2291a300778e6672e5267a900e4524bf9bb63f525a71c34d5ebc38d6ed66d0a524d049d6f96c19fc3d5c6a4b2df0b0ca143aa6e9dace5bbe1c3c16c92a72d8442852ee803c7d0a0e07a07cad679f3a324ec9387ad6c83fbe3d681921356ec789ea179011b541156a1b96e46a11a47f97153335ad50d", @typed={0x8, 0x4b, @pid=r0}, @typed={0x4, 0x6a}, @generic="829a12985f2b977e2b70aa77a9b869f29fec50bbe533ccf0e3fb45133a8eda4de1c984960ecf6dc6bcde1fdb0ac025a1d9e54b25", @typed={0xc, 0x2, @u64=0x17d}, @generic="f4379b675d26fe1b8d57c32223fda536f3ade2e3dc854fd7b99aacf05a920e5e490ab930dce1e038918859da2b73a3695e17052e5d75c51bade0ae9369bfbaa2b9ba0fb3d133e8657f2124", @generic="8a77f09475ae25c719678bc5b1bd661acd4071d9f1da5dffa2034d42b3782d350f9a1db9c8687fe8515560869bae1404d7fe447600e2792d95c00c4ee7c1dc7b57382b24ee2b92108798", @generic="07cf7b57aff6e5dfb3f59cf96f034251a55c70f548d9599405e52b6a89a92631d2a9dac9d8c5d32f703b70c6623af40050fe4a56706b945e92262fa8fd3ca6e393f7d5e114e6f34f774b1b53c4a45300ee5ce6e6466f81f62945b076af42c9cb93b96f20c10efafb4dc2416383532909acab753d8033a76944b5965717795a2c3c615e9437d3e40159b8844d24f707efc836bcc392d83b75284918224246dc76f95005bc38aa0824927076bd8ac9d597e431e4cc1bb999c486"]}]}, 0x330}, {&(0x7f0000000640)={0x164, 0x2f, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xc8, 0x4b, @binary="22cf823a9cf183aff0ca3bc8b5ed16bd05bb50906fbc466f533cdd4124d2846aea2da635773c302f7f1e59d88a8fce742d36bb0286235d6439a555be241466c9039c755d9c1a34ce2f31594907abd974b043cb68f81b04c21d32e535d7d7d1915dad5de433ff0b284afd0f93489c013e76fc5be064a3aaa5f060c42dd3f4186dbe7bb739bd43a77777f482941307558bf31f923a35b327f7c3fe96eb8934442aa0ad2aaa5122ada7364467343f5f095142907de61e9033056617a98e16bf36fc78a1b2"}, @typed={0x8, 0x7b, @uid=r6}, @generic="6a4b32efe5bd76e0620b7230c052550121adf4e177b6cfe22a014b5283f6ab1f236962481f115c5a1548726316d21f245445371f72b0978efd86e92c81e78768fa6749cb9daaea5c1eacd060be765f4341ef2fd5d35e0138411d0ee2dac21be49c0449970ae30b96f0a99bb49f10addde422006887e70936514a766420563ec61b02"]}, 0x164}, {&(0x7f00000007c0)={0x244, 0x2d, 0x4, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0x12, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x7e, @pid=r7}, @generic, @nested={0x224, 0x22, [@generic="9a0c42893c785156a572eb4bc73735ea652983cd5d69ab87ca0a6aa97c72a51c42e723a8dd8be6c49b35d258006719da5a36402e6f45abaeb6420ec7228cd748f26368bb9ab6b8050c5ad1e30b438996832567f804d7a7b7874027012590d20b043b5148486e6d687a664e2791de024321d7890b19d97024d3947342cf8d0379eb1a583be53a06d98fe0926505de5dac57ab160900f70d6ac047", @generic="f9f675641a94881134cb0328a63bb91c7c156c45e65bf23049cbf3505f596ee20edab56dc2852a8892e19cd6606ca59f7b1f3c5670bf48883ff58fb11a5b4d58698c458fa96f675ff1be79496ab1c72a38f969aa2bf5716673729e435b6a225e403192632e21ecddaf3341213f33ca6e0c19dd47f7f0758948a09c53b40533e7c975abe6c109e870080f9be88f373e9e94df6498fa21e1eb84035eb81dc9e66055f20df9ec7076e2973c6eac4d2d98fb66b678f51c0ebade485eee4a748f114315", @typed={0x34, 0xc, @binary="ce3ec05b8d4aadb7ef977e965a5f7107d2fcd14a772b8955fa0c75640b6009900b53a4daff333a3d70595d932fe85146"}, @generic="0629af304d57362d6a5a568ad2a3ceb3096b598b373ab8dd566bea76d93ecab6a36542ee2d6dc4ed97929790fa49b58c8fdf3b73e321c96b77c1b6703562a5e7bd8a0117198ca3e58c898c999426f23e010540e59f564d4c82f127003073e81975af5d8a0169bb8d69f9952efb50623e0ef1a3881dfa6c5e2749b66ca20c2a7ec135e3661943ff3b98db611f177da04c"]}]}, 0x244}, {&(0x7f0000000a40)={0x568, 0x2e, 0x4, 0x70bd28, 0x25dfdbfe, "", [@typed={0x18, 0x7b, @str='memory.swap.current\x00'}, @typed={0x8, 0x30, @pid=r8}, @nested={0x80, 0x66, [@generic="055f24063ca0b6013bc947f540264702d5c4718573b6fc4738993da314fd0ed39369713460a54b89c467186959910689d1e05bbbabc82260ac8fd21504843a6124605380f40e9411e7201d0310c797d339a45a3250ccbb7dc4c74c122a2a55a369e9e43df2ded3d1", @typed={0x8, 0x22, @fd=r2}, @typed={0xc, 0x90, @u64=0x13}]}, @nested={0x108, 0xa, [@generic="79c03883386374c1b3abee93c68cdeb8c7ed9b200a237a84b88ec6fdac17c11763ee963a0b1a9750ab3868432117a88e712fcd5e7aab4997528cf4b36250ef3846073fccdaf3f89b35fca7aeae0d348595a2e6b820fe80efe976c8c60a64b5726ee0d07148f734c8f04966979abaaca1a94ec81a7866b865617d55562370a700999a72cbafc4bfc7ddb4056917c996bb97e9157e89f1cab62293c24f0424aca35a6df90be94559aa4e8427f62f5552b794ab34c14108ce0dce5db8d8ca609c905145eb5150f52d7e53563bb69b783f051d738191eb129822b755b1f0027fa0156392082c8ecea66fd4acf960547d072b8216dfa201a2", @generic="44182526cd4004978e90dba7babb"]}, @typed={0xc, 0x85, @str='\xeanodev#\x00'}, @typed={0xb8, 0x2f, @binary="820e28afae31db7626c1f081c61d463faf76ebe28238b5c1602b70fbb32a8a4c6f98229850568d110a21417092eaff76cc890ffcdea516d0d91115f54fa58bd0355211d5a6c18672ac91b3e3e2ea0d2f93e57b908102778d2fce9d1e3e187546b146d9116e94442bb6acd722970de14ce14d40b78ceb5583b90700c2bff146b6aaf6466fcd02ea63fb98ce0a11a9f19528e25a6f50be52aaed3267bf9fc9d3422572cf099bdd8d45b94a4b755632ce35549204fe"}, @typed={0x8c, 0x56, @binary="4e1ffe8d4a2da5949e233626719dc22f4bbb5d706078bdd799310be8bffdbc4ddbf46ef1a7f83bd1c53ff9b3f02e27afca3421f64690edb4844ffbb01b44575769f3a68a219887f5fef90b70226f436fb610855e41f452ec13dd07fe9eb0f159adbf9adde71a46a775838fa5bffcdbd90aabe318f2caf446d04e4a8e5aa5e5539eab65604f"}, @typed={0x74, 0x3c, @binary="d45d1a9733fe2896bd247408e79cce7b33964698d70793390f73a75b8d484967d56b023a65a82a00a6da4c6a8387ca1b3242def390fb4deb1280f76a7228fe43aedbbc7f7001aa243f70cb346de0c53fd99a3afcbf7c151cf268a07308aacd78042b50977b953fb09c7627b884fa0f"}, @nested={0x1ec, 0x78, [@generic="9ed237cd27a8e2e24d916fda48ee0c1d420fb6f66d7dd0e354a0b6ca756b4465cd29c8ccca1b39ac46bb0894cc230a2a4a04e65ba602216fd891bed0f3d2f7d18d9c2edc790ebea4978da1389d58910137fff116b2436209e5b2bffb7d6f29bdaaff", @generic="68f1d8bf03b45a4b3e04136a4d7ab87bea18d056029687ac6f47c534b361421d7d6405b1d61a707eff733df6ff9710ad88df29bfe2ad5a72334b36f96963ecc27346bd83b989ccefd1d4d3cb89fb74f122da9b5cfdf8808eb8e56eacf419b51aa90f68038cd9f302e25a087f6778a3ce7f100e9045a76baab21d5ce750c3b04d092d207850fd17937f976f1126e8e5ee4bdc97708c04d4f5c72dd490a7911c166af1d07a7637b9ead10a566361912913de52d928bc5f71c4aceaa4ec4d215fe803a5", @generic="f0751d205977cd8cc9919f0c41ab7b5057e52211dd5575bf5b182adb57b374d623783540f24017900db42b990c4cefc43335d7c18eb772d5c220616ea1d36a5e6f9795ae7a127da7bc8e9fb7d6e280b73e85208a37b70498742a82b00c0e16e7f04a0bfb6af8e1790bb8ab1024ef26495d106f770ae460664306c6be0e3d6ab4359a6d503b49d5a95abc99810d23a49d00314172607a93c865d57e9c05f38e26f13f50dd0273c951d96d53c60f6fb79f677160064e5424b8d74c01e917440db9dc65901f"]}]}, 0x568}, {&(0x7f0000000fc0)={0x674, 0x11, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="c45ff45e81cbc862493ae23b7c7f61a44004d05dc2dad2e19ee290e05784b18cfbf923ff652f52e0e2ddbe9362219a05cebcefa4bc41bb00f35c49ca625085f47928ac16165e426b70c984a391134f5d345c0d7b5ade5e9e7c24e3dfd0c629cc309e3251f5732029e402d914483c467386aad8631d9e894c0aa92bb581bceaf41b2ca31fe4a0d5b7e31c03cdf7940f5585c76ab4bb7cc782fb68007942e3527cf54a28c8f4f02ab0b309970de649166d1d258a5acc2658f84b6f4686cbc70e80e1c097", @typed={0x14, 0x92, @ipv6=@local}, @generic="f7eab8cbc045d20fe670d4444554bbc885d5e012d627bb144f99db56b46e5ba28d6a8d5026bdb1d879de5f0fa7afb4ce7fe02c8ce13f381b1c6394b1dda57510dd6e6e5c610ea5bb642c95eabbe3f70573c014dfed08813e8c50ffecc8a74862d905274378b62c6a7362752ea5880a80f31999871549458ff6ba8a1d5b09e1a10be4197c908c95fc5642d3da06f2a4787013afe7", @nested={0xc, 0x61, [@typed={0x8, 0x6c, @fd=r11}]}, @typed={0x8, 0x85, @ipv4=@loopback}, @typed={0x8, 0x2e, @uid=r12}, @nested={0x64, 0x76, [@typed={0x8, 0x6d, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @typed={0x58, 0x8b, @binary="75471c829432a0b6e8a4b6f34a8c08d3e51166d8e3d6ce953c481c5b0ff765f73409f570b96ad98410af5139ed830ca461e1f9e37c7d4f0a2a87e19803372d5eb985d70e72416487b6edb22859ceb2589edb8b10"}]}, @generic="e710cace28f7fff1fcf600d913e007fc3f71afb85e956e3aa71a3c935875ab7bbe3dc4614f5b92b8d5e4852998934740f595948cd8d4ceccc69beedf31d15199a518e106ae3d9f56ff81ea123ed593238236f8511e8c4092e50b0cecb97f8440067a2da51d54fc4c000f64fc71d108ac4b1edf795344425a7b5e7aa77ee2ec4fcdf9e701e367cbd6c05bf123d427c0328af80532e81558bc35bb3ba233148acb7eaef9cd8465", @nested={0x1b0, 0x4b, [@generic="79d7a8fe06848ce9014270d7b37b736af02fcb00aed24b659e11e726066a5ab75a202692454f612d3cc43c9bffa7c820d6d84150c5bc8c242655ef690dcf0be584c3", @generic="c064ebfd8debb780713c26dc33736c23e8c56078b47d9432c914f04e3746ef540bc74334415cbc1fa8550374a6cd1860e788674c0bb9193d3e683bab218eb97acb17387ba87af21773fc1c7d78760efed704268bac5dad1a75f9d3806bb65efe781dd1f6574ce5babcf1eb64f2bf9b377d1562fd7cfcaecdfe60d252296fea0370ddb934e5", @typed={0xc, 0x14, @u64=0x6}, @generic="cbc4e410ac76302c99b9111e26147bed2588c0022e01b91dfb535dd86fc7eea5f21a72512c0c7750063eeb45ab577f7ce51abf557adb07a04fa5d4c0421eb9b60d9b2d8e9a5f255c5b870871cb8ec50fdeb64852ef8b20196993b19a1420c8e79c7b3d152276b01de0cea57b6c08f375fe68e7b5ebd20a44ea2f5a84fa08816d92c08c6e6916f31a26c07c3f09fa2b395c8b4c2a6e12304c5e2eace68914bcb4edab36413057a73d622ad9bcc1c9824ac889092467c649d4ae59bc173451ee47ede9df79cd61af45d74628669db2903708", @typed={0x8, 0x2c, @u32=0xb4}]}, @nested={0x220, 0x51, [@generic="52b9a9ba7228776d0ac3c122aebb27bfe7f50652c72c083f2927e44f7bf4d626f29ed194a21d5e89288d7cdf693910109f1027bac2b9ab42382653d7aa3ce543e37c", @generic="775a78cb5ab195a5038beb551054f14dedc70b745a545be491ff501ebcc63899faeafa8881", @typed={0x14, 0x3e, @ipv6=@remote}, @generic="d24af4bd082fc150e65650c3fcfb2747bcc41c4434836e39c9d4330f74b66ebaf9592e4be1ece835df11e409c3dd697307e1d30622e6276e4f8b6e993d208391b685266c5073f174fc48b65180f189abdd09512e7f7fb2ef9648e6efd73a3296d8304d4a0d36dfde7d7c1f4e7c32a56a51b5f43de2b9436a112cfe2b44b49dc8cda91b8fff4267bfb32237ad3841947ef07b30e0501611c1e2cab905b5748c66b6d5456ee3b06736f3d62071aecdb9437c3c46a45dc589f3ad2a19297ef15037d383fc0ee795c837882d71067e06a8736834238a459745746359457930a4d44559d89eacdb048f06", @typed={0x8, 0x48, @u32=0x5}, @generic="42818d91fd7d0b9770b9adfbc2d54583dc48a9d722f6a017d30312b95c8c9abfae44f5b6166e7873c83b6c4b736eb4e52153aff48e76c435d460ce9b87c1a877fecb9b175f0bf80e67072f61aaee983ade507e77f368d58041a53fd6e4248b891d109eedfc2e9ecd54ba6e0e4e252e5b9e3c5cee4021e782ab3a91353c9064d985fe8ce03cbf13d367a90f64a33683730b583787d000c737dfd968ed2def4d48c8deec9be477d5af47226e437af0ce82"]}]}, 0x674}], 0x5, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r18}}}, @rights={{0x34, 0x1, 0x1, [r2, r20, r1, r2, r23, r24, r25, r2, r26]}}], 0x58, 0x40000}, 0x1) ptrace(0x4206, r0) r27 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x6000c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = fcntl$dupfd(r29, 0x0, r28) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) r31 = openat$cgroup_ro(r30, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r31, 0x5608) ioctl$VIDIOC_SUBDEV_S_FMT(r27, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x2, 0x5, 0x2007, 0x0, 0x4, 0x8, 0x1, 0xf}}) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:43:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400, 0x0) kcmp(r3, 0xffffffffffffffff, 0x4, r6, r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000040)) bind$rds(r9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r0, &(0x7f00000000c0)={0x40000004}) r10 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r10, 0x0) 03:43:56 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004711000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:56 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xba, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x1, 0x6, 0x0, 0xc, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561725f63616368652c656e6f73707364656275672c009c43f74a3de2cf9e62dd70a93ae1d63f7736b26e9e475073e562d7d310250dad7f3998abe1cd6b5b65af7b422d58b790496cb87ca07f054caadf92ac5120877187a710b9533a14614e672af76fa52d1c3c2639926712cd06e67790e8370b432e4a0147bcf750fda240867ec011232b7df385d856558f5bf7c64cd2eb87c9c88b933fe399c6f23c629bd2072783"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:43:56 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004710000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:56 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1205.045336][T26757] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:56 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PDEATHSIG(0x1, 0x25) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x200, 0x6, 0xfffffffe}) [ 1205.418306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1205.424225][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) fallocate(r0, 0x10, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 1205.501751][T26753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:57 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:43:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1205.913182][T26866] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:57 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300470e000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1206.068891][T26866] ieee80211 phy185: Failed to add default virtual iface 03:43:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000140)={&(0x7f0000000340)={0x18, r2, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="85acd417010000714805653be92c7c8996f0f58eeb2901d2c36959836771eddc000531d6a81b7f81cb5a0e37b450281e5536db52e6133b62dfb1fd25bcda280000", @ANYRES16=r2, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x0) clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x400000000000010, 0x802, 0x0) write(r8, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r9 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, &(0x7f0000000040)={0x10000, "88515e9b670b950bc956faa2ac850361462533d0b5bfd0f99f9d69e862dde73f"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000500)={0x400, 0x8, [0x8, 0x62c6, 0x1, 0x400, 0x1]}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYBLOB="00000000745244b433ecb682c486e9b476844a39f4365be1b2ee03e8bc39706d7c2889e67746af0323f1f2ddfda224b78a36fb087c4945032066fda6943fa7aec7fa45d5f4609410a219dff345b8e002b2cbbdc43184033ff48faaec1fb175af0478d3f8fa085cab469f77f0db517f5a9f209c6c24016da7f08a432fda979f6613944ff3841a050c1ad82a9289d8563b52b56a00000000"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000004c0)={r10, 0x5, 0xffffffffffffffa5, "38f45aa5be45f869392bfa9773f7c83b1073bd0ce11283321dcf39b271e2"}, 0x26) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={r10, 0xfffffffb, 0x1, 0x8}, &(0x7f0000000040)=0x10) ptrace$getsig(0x8, r3, 0x0, 0x0) [ 1206.151830][T26983] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:57 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004712000000000000b600047479706500"/36], 0x269}}, 0x0) 03:43:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$jfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000000780)=[{&(0x7f0000000200)="939dca2bd1ab3ba735fd2dce4e8263a6bbbd11e278d6aec1784d699ba4df7d48df0f22567e4d7845afc86e1695879cf08bc4aa49f5501e63962495cf930a35aeff74a6a9e50ec9ee04fd2ce41ce6d88ace6ddcf1faaa", 0x56, 0x7}, {&(0x7f0000000100)="abeba5c2bb95c2ec04cf23783eab15404d78d7124e849b7e413cde9e54888ab441ee552f559febc0acd6eaceccbbbd09b86fec71348e723fab628ab0b6", 0x3d, 0x5}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000000340)="558acfbe1646ec691d62f39fe362734dcb7114a8d5b3a6608c79319219e48d5573a7372f8c43156cca1994f56097ad6cd0c867ec19c66392daf411cd314fbdbd434b36f19f4f732dbe241cdc9a29d363", 0x50, 0x2}, {&(0x7f00000003c0), 0x0, 0xffffffff}, {&(0x7f0000000440)="4fc356603c12e98a75f62855748cf90b9aa65fb932238208d78b1e984813db8f4d6ccf9e8531d8fea29477ed78450d2e71166447bfd85516d86e5403ccef5143d4a696325caa5b2b7c72b687d937e5537b087cc9034e79271ed10927fb70e4a39053011ef9e6549de3dcf5e10d3d943380d6e4f007e43be0e8545f011fdb7827ad7b5a70d41b4c731c9f3b38f585f00a56d50571bc3f6fd31ece1d", 0x9b}, {&(0x7f0000000600)="36ced7819f5f3711388dfafdd1dea4b58422f0fda24f562380b7737689e3aa357d7e34176ee66890a57253370ed26eb84704e0f7fd36a837fbc861fed1c5544ae9d57df355b3d4d070d0ada33ca89e2e0b0bdbc03e4826073484aa03bbb6fd1bb5f54286f76f404e4c545314a24956ec45bd78c9fc2b746d078e2bf3120b4fd829f94339f177deb1c25b929ada50ae802664fcfb9af86cabdeeb6bc2e55d197309440964a759a28e145c5794b0e7cf2d8e8534485b8e67f92572", 0xba}, {&(0x7f00000006c0)="78c94f35055e36b6f1e87f9c0c1937c8", 0x10, 0xc64f}], 0x4, &(0x7f0000000b00)={[{@umask={'umask'}}, {@discard='discard'}, {@discard_size={'discard', 0x3d, 0x100000001}}], [{@fowner_lt={'fowner<'}}, {@euid_lt={'euid<', r3}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ppp0trusted'}}, {@euid_gt={'euid>', r4}}, {@uid_lt={'uid<', 0xee01}}, {@smackfsfloor={'smackfsfloor'}}, {@obj_type={'obj_type', 0x3d, '|'}}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r6 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r7) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$jfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000000780)=[{&(0x7f0000000200)="939dca2bd1ab3ba735fd2dce4e8263a6bbbd11e278d6aec1784d699ba4df7d48df0f22567e4d7845afc86e1695879cf08bc4aa49f5501e63962495cf930a35aeff74a6a9e50ec9ee04fd2ce41ce6d88ace6ddcf1faaa", 0x56, 0x7}, {&(0x7f0000000100)="abeba5c2bb95c2ec04cf23783eab15404d78d7124e849b7e413cde9e54888ab441ee552f559febc0acd6eaceccbbbd09b86fec71348e723fab628ab0b6", 0x3d, 0x5}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000000340)="558acfbe1646ec691d62f39fe362734dcb7114a8d5b3a6608c79319219e48d5573a7372f8c43156cca1994f56097ad6cd0c867ec19c66392daf411cd314fbdbd434b36f19f4f732dbe241cdc9a29d363", 0x50, 0x2}, {&(0x7f00000003c0), 0x0, 0xffffffff}, {&(0x7f0000000440)="4fc356603c12e98a75f62855748cf90b9aa65fb932238208d78b1e984813db8f4d6ccf9e8531d8fea29477ed78450d2e71166447bfd85516d86e5403ccef5143d4a696325caa5b2b7c72b687d937e5537b087cc9034e79271ed10927fb70e4a39053011ef9e6549de3dcf5e10d3d943380d6e4f007e43be0e8545f011fdb7827ad7b5a70d41b4c731c9f3b38f585f00a56d50571bc3f6fd31ece1d", 0x9b}, {&(0x7f0000000600)="36ced7819f5f3711388dfafdd1dea4b58422f0fda24f562380b7737689e3aa357d7e34176ee66890a57253370ed26eb84704e0f7fd36a837fbc861fed1c5544ae9d57df355b3d4d070d0ada33ca89e2e0b0bdbc03e4826073484aa03bbb6fd1bb5f54286f76f404e4c545314a24956ec45bd78c9fc2b746d078e2bf3120b4fd829f94339f177deb1c25b929ada50ae802664fcfb9af86cabdeeb6bc2e55d197309440964a759a28e145c5794b0e7cf2d8e8534485b8e67f92572", 0xba}, {&(0x7f00000006c0)="78c94f35055e36b6f1e87f9c0c1937c8", 0x10, 0xc64f}], 0x4, &(0x7f0000000b00)={[{@umask={'umask'}}, {@discard='discard'}, {@discard_size={'discard', 0x3d, 0x100000001}}], [{@fowner_lt={'fowner<'}}, {@euid_lt={'euid<', r7}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ppp0trusted'}}, {@euid_gt={'euid>', r8}}, {@uid_lt={'uid<', 0xee01}}, {@smackfsfloor={'smackfsfloor'}}, {@obj_type={'obj_type', 0x3d, '|'}}]}) r9 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@broadcast}}, &(0x7f0000000ac0)=0xe8) syz_mount_image$jfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000000780)=[{&(0x7f0000000200)="939dca2bd1ab3ba735fd2dce4e8263a6bbbd11e278d6aec1784d699ba4df7d48df0f22567e4d7845afc86e1695879cf08bc4aa49f5501e63962495cf930a35aeff74a6a9e50ec9ee04fd2ce41ce6d88ace6ddcf1faaa", 0x56, 0x7}, {&(0x7f0000000100)="abeba5c2bb95c2ec04cf23783eab15404d78d7124e849b7e413cde9e54888ab441ee552f559febc0acd6eaceccbbbd09b86fec71348e723fab628ab0b6", 0x3d, 0x5}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000000340)="558acfbe1646ec691d62f39fe362734dcb7114a8d5b3a6608c79319219e48d5573a7372f8c43156cca1994f56097ad6cd0c867ec19c66392daf411cd314fbdbd434b36f19f4f732dbe241cdc9a29d363", 0x50, 0x2}, {&(0x7f00000003c0), 0x0, 0xffffffff}, {&(0x7f0000000440)="4fc356603c12e98a75f62855748cf90b9aa65fb932238208d78b1e984813db8f4d6ccf9e8531d8fea29477ed78450d2e71166447bfd85516d86e5403ccef5143d4a696325caa5b2b7c72b687d937e5537b087cc9034e79271ed10927fb70e4a39053011ef9e6549de3dcf5e10d3d943380d6e4f007e43be0e8545f011fdb7827ad7b5a70d41b4c731c9f3b38f585f00a56d50571bc3f6fd31ece1d", 0x9b}, {&(0x7f0000000600)="36ced7819f5f3711388dfafdd1dea4b58422f0fda24f562380b7737689e3aa357d7e34176ee66890a57253370ed26eb84704e0f7fd36a837fbc861fed1c5544ae9d57df355b3d4d070d0ada33ca89e2e0b0bdbc03e4826073484aa03bbb6fd1bb5f54286f76f404e4c545314a24956ec45bd78c9fc2b746d078e2bf3120b4fd829f94339f177deb1c25b929ada50ae802664fcfb9af86cabdeeb6bc2e55d197309440964a759a28e145c5794b0e7cf2d8e8534485b8e67f92572", 0xba}, {&(0x7f00000006c0)="78c94f35055e36b6f1e87f9c0c1937c8", 0x10, 0xc64f}], 0x4, &(0x7f0000000b00)={[{@umask={'umask'}}, {@discard='discard'}, {@discard_size={'discard', 0x3d, 0x100000001}}], [{@fowner_lt={'fowner<'}}, {@euid_lt={'euid<', r10}}, {@smackfstransmute={'smackfstransmute'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ppp0trusted'}}, {@euid_gt={'euid>', r11}}, {@uid_lt={'uid<', 0xee01}}, {@smackfsfloor={'smackfsfloor'}}, {@obj_type={'obj_type', 0x3d, '|'}}]}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x0, &(0x7f00000000c0), 0x10002, &(0x7f00000002c0)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@dots='dots'}, {@dots='dots'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@dots='dots'}], [{@euid_gt={'euid>', r3}}, {@uid_eq={'uid', 0x3d, r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x39, 0x36, 0x37, 0x0, 0x32, 0x34], 0x2d, [0x0, 0x31, 0x36, 0x30], 0x2d, [0x1, 0x35, 0x61, 0x64], 0x2d, [0x0, 0x38, 0x36, 0x62], 0x2d, [0x3, 0x63, 0x50, 0x39, 0x36, 0x0, 0x61, 0x37]}}}, {@euid_gt={'euid>', r7}}, {@uid_eq={'uid'}}, {@euid_gt={'euid>', r10}}]}) r12 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r12, 0x0) [ 1206.378466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.384473][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:43:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:43:58 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1206.581276][T27090] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1206.618402][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.624214][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1206.858294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1206.864066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1207.052264][T27104] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1207.188762][ T7] device bridge_slave_1 left promiscuous mode [ 1207.206188][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.279082][ T7] device bridge_slave_0 left promiscuous mode [ 1207.285326][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.918714][ T7] device hsr_slave_0 left promiscuous mode [ 1207.968393][ T7] device hsr_slave_1 left promiscuous mode [ 1208.014741][ T7] team0 (unregistering): Port device team_slave_1 removed [ 1208.024931][ T7] team0 (unregistering): Port device team_slave_0 removed [ 1208.036979][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.087972][ T7] bond0 (unregistering): Released all slaves [ 1208.207803][T27108] IPVS: ftp: loaded support on port[0] = 21 [ 1208.258659][T27108] chnl_net:caif_netlink_parms(): no params data found [ 1208.283332][T27108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.290514][T27108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.298082][T27108] device bridge_slave_0 entered promiscuous mode [ 1208.305509][T27108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.312666][T27108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.320505][T27108] device bridge_slave_1 entered promiscuous mode [ 1208.337128][T27108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.379757][T27108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.398199][T27108] team0: Port device team_slave_0 added [ 1208.405246][T27108] team0: Port device team_slave_1 added [ 1208.460522][T27108] device hsr_slave_0 entered promiscuous mode [ 1208.518681][T27108] device hsr_slave_1 entered promiscuous mode [ 1208.606293][T27108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.613450][T27108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.620766][T27108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.627787][T27108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.667263][T27108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.683109][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1208.694739][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.703168][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.719014][T27108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.732327][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1208.741165][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.748203][ T7607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.769380][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1208.777731][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.784760][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.794186][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1208.812825][T27108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1208.823542][T27108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1208.836018][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1208.844270][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1208.853144][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1208.861914][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1208.878597][T27108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.885756][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1208.893342][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1208.901171][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1208.984014][T27117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.991254][T27117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.056348][T27117] bond0: (slave bond_slave_1): Releasing backup interface 03:44:00 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561725f63616368452c656e6f7370635f64656277672c6e06ea5fa0f2d000"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) preadv(r9, &(0x7f0000000400), 0xed, 0x40800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:00 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "e59b133cc78cecc57debbcd162da13cd1a1514ae"}}]}, 0x150}}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 03:44:00 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561855f63616368652c656e6f73706eb964656275672c0046d48c47d90e6c9ef41af4c366216e315b117009c46a550648b199862458bef8d073b336717f030681621588a20b6571ae9fdf768885b5e6e4afa9c6ba020b5f4f949a284b3d02f35bd60ecc8ff6f0d62cee7291444f1e11647614976187afa7df4426d6bf1e2c21"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:00 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:00 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004719000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1209.318265][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1209.324086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1209.331263][T27130] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:00 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mq_notify(r5, &(0x7f0000000280)={0x0, 0x36, 0x4, @thr={&(0x7f0000000140)="8d8cdf151f65d7838c0b2a6342ec3833b70f4d32226992aed1ed41e052644ae4e799319e0dfcf7dec813b91279223f45068539d05796c11530780253da3dd7e4fbb9860efaaaced198206dae657355f4b2fead5d647f66e0d504f6fa7b4f4e55e69cdfd15ea35fa4e60a943c062e45d994a09b1d997c17a49f8df1c60798db3de12e889266fab4cdb3fd7f2bdaaa5dc70d084733a0cd73575178ff0e9e309f884e42aa33c09bbe3b98d235dfcebfa49cc40f0241eac6513f7d73655ff1468e59e5ebf26c05a96f4dc5f275cbde8ffbf192f2c63c04", &(0x7f0000000240)}}) write(r2, &(0x7f0000000040)="0ab10af9609a058f5d29e2527918a3612ed019ab7fa888ef245d47c3c0616fa8f9cd101216f1bc25c65af21e64571d3ea8ee6878803097528b0debb2febbe884a9e1bd34c139be84ba6c6282c1a28b91c285004f3a20e490fa6f9f2b05f6c2bad3bcab3b75ad7da120854497113b86941800d783d99134223d5ede4f4936749eab1ffce4c73ed081867bd56fdff98ebb3eab70ec7b13175bc705249d5d661f1368af5ac28b0dfa1b52c51da406e8dba9b15e75fe1378fd3f0392b15c76bdc29118fdb61d6b8a9cdb2628d20b93dcf433f143d97d75f49a293794f7d56c", 0xfffffffffffffc28) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000000)={0x7, 0x1}) accept$unix(r4, &(0x7f0000000300)=@abs, &(0x7f0000000240)=0x6e) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:01 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) inotify_init() fcntl$getownex(r1, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x800000000080002, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r6, 0x1, 0x70bd2c, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x80, @link='syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xff\xff\xff\x00'}}}, [""]}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa4fff34ebd5a752a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x600b6220392b9bb7, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xa, 0x800, @l2={'eth', 0x3a, 'hsr0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xeea27db728cc8b6b}, 0x8800) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r7, 0x0) [ 1209.732284][T27127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.740367][T27127] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:01 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x7, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:01 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:01 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002900)={0xffffffffffffffff, 0x10, &(0x7f00000028c0)={&(0x7f0000002880)=""/64, 0x40, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002940)=r0, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, 0x0) ptrace$getsig(0x8, 0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x150900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000002980)={0x2, 0x1, @start={0x200}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) sendmsg(r6, &(0x7f0000002840)={&(0x7f0000000100)=@llc={0x1a, 0x33a, 0x7f, 0x20, 0x1, 0xff, @dev={[], 0x20}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="58542dd4c5ca", 0x6}, {&(0x7f0000000300)="c1f239f731f342dd8e51b585e0e7d91468b03f84717b36867412e13eeff7bdabb86d380f48648d0dd1d3aa174bf68ccba74a806a0b7b60bf1a7ac84bceeac89142bccde997dfd36ad5ae5faa4387aee1118714b794204f000ef7d5abf325cfbd792574692a54ef93afe19461bda3eef226c79bb6dd1ac8d5e8cae4b8fb936cc66558d47e92f9ddace99f3125b4a1f3ced59d1e811c4709c83b2aac11e4cc52ad", 0xa0}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="cd32bb6f32a7393d870299b25327903dedec4e461dedeeb564a432dc61662903dad81077eaa22921eddea4e375ad8554587f3cb40ddef20fd8bdca686846158a3e1c9abcf078904af7b90ec90cea28da5e4860aa7d4e7573953842f34de55e845ef1b737ff483b9b2082386f65883a83ba3994987d341afd9cedb04321ab482f3823", 0x82}, {&(0x7f0000002480)="5660b46cf01dcc2258ebb9ce458543130404fec2fcb90b4125690531286e5cfce7afdd00ec92c614ca3be7dc", 0x2c}, {&(0x7f00000024c0)="ff521679068ffd25ee30630c596a5df71b15d283b615221c63923ea82550265e41607448fa0ba99d7d77a2be9eb0fcd4868da22de8497acf78a024accbc92f0ed3575d00869c6e9349121b816b5c5d3a5e4fdd15cbf623fd20f95b6bf3e85bbde80d628b87156218c4162ce2eca21c8691e829dc8816a9bf8f77daca546f3c6f44ccd08f541eabdfab41d8aeaf8b16bf35b616031b02527ebd00ad8fd8faecd482d83e6709df7c5fd65c2111825401215d9d754f64f123fbb4caf4c9fe84", 0xbe}], 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/522], 0x218}, 0x4000) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/mixer\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000002a40)={0x0, 0x0}) write$input_event(r8, &(0x7f0000002a80)={{r9, r10/1000+10000}, 0x11, 0x0, 0x6}, 0x18) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0xffffff01, 0x0, [], {0x0, @bt={0x2, 0x8, 0x1, 0x6, 0x2, 0x5, 0x51d8, 0x4, 0x3, 0x749c, 0x7, 0x1f, 0xf83, 0x5, 0x0, 0x2}}}) 03:44:01 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r4 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r5 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r7 = accept$nfc_llcp(r2, 0x0, &(0x7f00000003c0)) fcntl$dupfd(r7, 0xa0f, r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$sock_ifreq(r8, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r10 = accept4$rose(r3, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1210.365058][T27356] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1210.368324][T27358] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:02 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002300472f000000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:02 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x7, [0xbda, 0x5, 0x4, 0xf1, 0x3, 0x6, 0xff]}, &(0x7f0000000040)=0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x400000000000010, 0x802, 0x0) write(r9, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r10 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r10, 0xc0345641, &(0x7f0000000040)={0x10000, "88515e9b670b950bc956faa2ac850361462533d0b5bfd0f99f9d69e862dde73f"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={r11}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)={r11, 0x4, 0x16, "38f45aa5ce45f869392bfa97731283321dcf39b2c593"}, 0x1e) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000380)={r11, 0x400}, 0x8) rt_sigaction(0x11, &(0x7f0000000180)={&(0x7f0000000100)="c481f5f2cac4833d680284c42181ddb00e4c0000420fae58ffc423ad69df4c66400f2d1e660ffb0db48d0000640f18b600000000c422c1034000f0471829", {0x40}, 0x4, &(0x7f0000000140)="6543bb00100002660f38373d090000000f4783d4fc4d1f8fc97898dcd9f866440f383e5c1887c4627d287c3da3c4c2fd201e2e43adc4411d6802"}, &(0x7f0000000300)={&(0x7f00000001c0)="6765670f5d95000000213666420f55e1362e430fb61ac4a1905c8b06000000660fc2f100260f10de420f38f1410af2450f7dbbffefffffc4c3a50d67000343c78450010000000b000000", {}, 0x0, &(0x7f0000000240)="0a8bcae6f38d660f381db62b0000003e640f700200c4e15d5528c441f97079006bf3440f1efa0f0d5fdc430fba7d006dc42199d57600431599899999"}, 0x8, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)={r5, 0xcb5, 0x3, [0x1f, 0x4, 0x10]}, &(0x7f00000000c0)=0xe) 03:44:02 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561855f63616368652c656e6f73706eb964656275672c0046d48c47d90e6c9ef41af4c366216e315b117009c46a550648b199862458bef8d073b336717f030681621588a20b6571ae9fdf768885b5e6e4afa9c6ba020b5f4f949a284b3d02f35bd60ecc8ff6f0d62cee7291444f1e11647614976187afa7df4426d6bf1e2c21"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000cfd000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r8, 0x1) 03:44:02 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004768000000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:02 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="c6a1efeff5e037af3883e7e3b2f1713a1ca0e1986f39116715dda0d9e11e03c9fa2706e25a519f02b2d8989bdaf09efe20b5a4d4c603f2b0ae55afcc714c990da25e2c4f1d83fc78cd144aff2db92962162887da7d863c922f813b023b8dd2a227c000"/108, 0x6c) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x2000) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/50, 0x32}], 0x1) 03:44:02 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1211.109319][T27582] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:44:02 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x7, 0x2) [ 1211.348272][ C1] net_ratelimit: 4 callbacks suppressed [ 1211.348282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.359639][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41bf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000080)=""/56, &(0x7f00000000c0)=0x38) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x7, 0x9, 0x7, 0x9, 0x81, 0xc1, 0x2, 0x80, 0xb9, 0x1, 0x7, 0x2, 0x7}, {0x1, 0x4, 0x0, 0x9, 0x3, 0x9, 0xf9, 0x3, 0x5, 0xff, 0x39, 0x4, 0xffff}, {0x446a, 0x0, 0x6, 0x4, 0x1, 0x5d, 0xe5, 0x8, 0x7, 0x1f, 0x1f, 0x5, 0x5}], 0x4}) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x7, 0x3, 0x6, 0x7, 0x200, 0x1}) 03:44:03 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561855f63616368652c656e6f73706eb964656275672c0046d48c47d90e6c9ef41af4c366216e315b117009c46a550648b199862458bef8d073b336717f030681621588a20b6571ae9fdf768885b5e6e4afa9c6ba020b5f4f949a284b3d02f35bd60ecc8ff6f0d62cee7291444f1e11647614976187afa7df4426d6bf1e2c21"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1211.658272][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1211.664072][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1211.879033][T27805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1212.088806][ T7678] device bridge_slave_1 left promiscuous mode [ 1212.095066][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.188968][ T7678] device bridge_slave_0 left promiscuous mode [ 1212.195200][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.838674][ T7678] device hsr_slave_0 left promiscuous mode [ 1212.888326][ T7678] device hsr_slave_1 left promiscuous mode [ 1212.944577][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1212.954706][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1212.967216][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.038284][ T7678] bond0 (unregistering): Released all slaves [ 1213.255839][T27810] IPVS: ftp: loaded support on port[0] = 21 [ 1213.327736][T27810] chnl_net:caif_netlink_parms(): no params data found [ 1213.361630][T27810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.370926][T27810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.379449][T27810] device bridge_slave_0 entered promiscuous mode [ 1213.386750][T27810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.396243][T27810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.404239][T27810] device bridge_slave_1 entered promiscuous mode [ 1213.424004][T27810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.436961][T27810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.458879][T27810] team0: Port device team_slave_0 added [ 1213.465655][T27810] team0: Port device team_slave_1 added [ 1213.540864][T27810] device hsr_slave_0 entered promiscuous mode [ 1213.590907][T27810] device hsr_slave_1 entered promiscuous mode [ 1213.646277][T27810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.653384][T27810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.660709][T27810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.667802][T27810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.696297][T27810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.708528][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1213.716782][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.724799][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.737882][T27810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.748663][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1213.756968][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.764053][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1213.780171][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1213.788628][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.795707][T19184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.806915][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1213.815610][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1213.827434][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1213.838602][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1213.849111][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1213.858822][T27810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1213.873276][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1213.881178][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1213.891520][T27810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.044938][T27820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.052345][T27820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.216309][T27820] bond0: (slave bond_slave_1): Releasing backup interface 03:44:06 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000400)='./file0\x00', 0x2) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @bcast, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB='ssd_spread,enospc_deBug,\x00']) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:06 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) timerfd_create(0x5, 0x3cf8f2b19d21a5dc) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "e59b133cc78cecc57debbcd162da13cd1a1514ae"}}]}, 0x150}}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 03:44:06 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000080)={0x29, 0x1, 0x35, "8a36856b597a9554e8d51cc6993a96d0e611fa23a8575453cbfd2d8febab46c1b80ef8a128a9519d8499017ee344e09190e0d0a846851458de2c458e", 0x2a, "6046c069294eba260fc17afb8b1b5dd5363e168cbe8d39594a894c699b38e7b0c0bd7714b32ebc2c0388b0e2b0092dec0ab5239e018cf673201f4243", 0x60}) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:44:06 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004700070000000000b600047479706500"/36], 0x269}}, 0x0) [ 1214.586747][T27827] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1214.698375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1214.704250][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:06 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:06 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x404c00, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x4a, 0x9a0, 0x2, 0x0, 0x1, [{0x2, 0x10000, 0x6, 0x0, 0x0, 0x4000}]}) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x16) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r1) ptrace$getsig(0x8, r1, 0x0, 0x0) 03:44:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfffe, 0x6, 0x1, 0x5, 0xffff7fff}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000100)=0x8) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 1214.938356][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1214.944316][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:06 executing program 4: utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x2710}}) clone(0x5a260b3a9ab4dffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000b18000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r1, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x80) [ 1215.178632][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1215.185053][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:06 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6571019cbfa347f0549946338f93f0a4b3e7c2976cb6c52aa1b4bfd6ad60fc6a5089e8d742b80fdc9da90237d6bca14152fe51ed71bd231ea384dcec51cc70326be740b380cede7435862e4ea920314d3d14f7d17d42f9f97838411780ffed6253090f3293fd6701544613d9404259e8f2cb86a247644b6b4627"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1215.308189][T28120] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:06 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x77, 0x0, 0x1f, 0x3f, 0x0, 0x1ff, 0x2410, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x6, @perf_bp={&(0x7f0000000000), 0x3aec0afb4a60d0f}, 0x60, 0xffff, 0x5, 0x7, 0x1, 0x8001, 0xbfb}, r0, 0x7, r3, 0x3) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:07 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561725f636000002463fcf926aa7b472019ed399e736642a5c40a14d1ecc916d5fe614fcb789f315455d65c83c1d176d1c3894d6b7819e5b91b635efb9eeae1e5f53a92444c06fead04280f689dfb093ba49987d7af400ed5ff02597e1846b8a19bbdfbd6e0fc7bc678c659"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8943, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_flags=0x400}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1216.189248][ T7678] device bridge_slave_1 left promiscuous mode [ 1216.195635][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.248804][ T7678] device bridge_slave_0 left promiscuous mode [ 1216.255041][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.988502][ T7678] device hsr_slave_0 left promiscuous mode [ 1217.048329][ T7678] device hsr_slave_1 left promiscuous mode [ 1217.124526][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1217.134860][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1217.144504][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.191249][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.268307][ T7678] bond0 (unregistering): Released all slaves [ 1217.355209][T28266] IPVS: ftp: loaded support on port[0] = 21 [ 1217.407632][T28266] chnl_net:caif_netlink_parms(): no params data found [ 1217.433231][T28266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.440317][T28266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.447877][T28266] device bridge_slave_0 entered promiscuous mode [ 1217.455137][T28266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.462373][T28266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.470420][T28266] device bridge_slave_1 entered promiscuous mode [ 1217.540149][T28266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.553863][T28266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.577510][T28266] team0: Port device team_slave_0 added [ 1217.584335][T28266] team0: Port device team_slave_1 added [ 1217.653426][T28266] device hsr_slave_0 entered promiscuous mode [ 1217.758598][T28266] device hsr_slave_1 entered promiscuous mode [ 1217.848284][T28266] debugfs: Directory 'hsr0' with parent '/' already present! [ 1217.861660][T28269] IPVS: ftp: loaded support on port[0] = 21 [ 1217.881606][T28266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.888662][T28266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.895954][T28266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.903019][T28266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.965569][T28266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.983784][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1217.994383][T19183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.002155][T19183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.034359][T28266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.054068][T28269] chnl_net:caif_netlink_parms(): no params data found [ 1218.074996][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1218.083705][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.090760][T10544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.112819][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1218.121351][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.128386][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.142778][T28269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.150195][T28269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.157972][T28269] device bridge_slave_0 entered promiscuous mode [ 1218.165641][T28269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.173103][T28269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.180738][T28269] device bridge_slave_1 entered promiscuous mode [ 1218.201540][T28269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.221320][T28269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.231915][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1218.241157][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1218.254033][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1218.262677][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1218.283065][T28269] team0: Port device team_slave_0 added [ 1218.289685][T28269] team0: Port device team_slave_1 added [ 1218.296584][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1218.309169][T28266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1218.380436][T28269] device hsr_slave_0 entered promiscuous mode [ 1218.418748][T28269] device hsr_slave_1 entered promiscuous mode [ 1218.458459][T28269] debugfs: Directory 'hsr0' with parent '/' already present! [ 1218.521943][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.529738][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1218.541540][T28266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.600045][T28269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.613360][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1218.624316][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1218.634134][T28269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.643195][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1218.652089][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1218.660920][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.668038][T10544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.713991][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1218.727914][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1218.737853][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1218.750556][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state 03:44:10 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x8) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x10, 0xffffffff, 0x2000002) 03:44:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0xc, @empty, 0x4e23, 0x2, 'sh\x00', 0x2, 0x2, 0x32}, 0x2c) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) r8 = getpid() r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = dup(r9) ioctl$FIONREAD(r10, 0x541b, &(0x7f0000000000)) sched_setscheduler(r8, 0x5, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r5, 0x0, 0x0) r11 = syz_open_dev$usbmon(&(0x7f00008be000)='/Lev/usbmon#\x00', 0x0, 0x0) read$usbmon(r11, &(0x7f00000000c0)=""/227, 0xe3) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r11, 0x0) 03:44:10 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047f4070000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:10 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:10 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x5, @pix={0x4, 0x7, 0x2c4afd72, 0x9, 0x5, 0x1000, 0x0, 0x3, 0x0, 0x2, 0x0, 0x2}}) write(0xffffffffffffffff, &(0x7f0000000000), 0x58) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) sysfs$2(0x2, 0x80, &(0x7f0000000100)=""/46) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) [ 1218.757594][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.854977][T28288] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1218.894160][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1218.911166][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1218.926444][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1218.949064][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:44:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x81) [ 1218.963449][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1218.976629][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1218.986147][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1218.995129][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1219.017577][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1219.043131][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1219.064868][T28269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1219.098276][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.104019][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:10 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1219.178371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.184124][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:10 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace$getsig(0x8, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) msgget(0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000000)={0xc, 0xa, 0x4, 0x84800, r7}) dup(r8) [ 1219.293343][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1219.300831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.300856][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:10 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1219.338296][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.344066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1219.347754][T28269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.408491][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1219.414548][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1219.445307][ T26] audit: type=1804 audit(2000000650.919:69): pid=28407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir222173416/syzkaller.ye0Jt4/3/bus" dev="sda1" ino=16584 res=1 [ 1219.494828][T28446] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xc, 0x101000) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0x40, 0x0, [0x0, 0x2, 0x1, 0xbe]}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1219.571158][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1219.588192][ T26] audit: type=1804 audit(2000000651.059:70): pid=28480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir222173416/syzkaller.ye0Jt4/3/bus" dev="sda1" ino=16584 res=1 [ 1219.617916][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1219.961659][T28534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.969919][T28534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.268840][ T7678] device bridge_slave_1 left promiscuous mode [ 1220.275072][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.328997][ T7678] device bridge_slave_0 left promiscuous mode [ 1220.335312][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:11 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0xfffffffffffffffe, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="636c6561725f6361636865b4666e6f7370635b64656275672c00"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$sock_ifreq(r8, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = accept4$rose(r7, &(0x7f00000003c0)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x180800) preadv(r13, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:11 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) socket$rds(0x15, 0x5, 0x0) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) socket(0xa, 0xa, 0x9) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:44:11 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047f5070000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:11 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1220.503283][ T26] audit: type=1804 audit(2000000651.979:71): pid=28543 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir222173416/syzkaller.ye0Jt4/4/bus" dev="sda1" ino=16585 res=1 [ 1220.505175][T28547] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:12 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$apparmor_exec(r4, &(0x7f00000000c0)={'exec ', '/dev/ubi_ctrl\x00'}, 0x13) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x149002, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000ffb000/0x2000)=nil}) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000080)=0x7fff, 0x4) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:12 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:12 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {}, {r0}, {}], 0x4, 0x0, 0x0, 0x0) 03:44:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 03:44:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffffe, 0x14800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$rds(r10, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/132, 0x84}], 0x1, &(0x7f0000000240)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/163, 0xa3}, &(0x7f0000000200), 0x60}}], 0x30, 0x4000}, 0x30001800) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 03:44:12 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6f"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1221.758533][ T7678] device hsr_slave_0 left promiscuous mode [ 1221.798405][ T7678] device hsr_slave_1 left promiscuous mode [ 1221.844126][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1221.855404][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1221.867838][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.958884][ T7678] bond0 (unregistering): Released all slaves 03:44:13 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x1a1, 0x4) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000000)=0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x1a8, 0x2f8, 0x1a8, 0x2f8, 0x0, 0x600, 0x600, 0x600, 0x600, 0x600, 0x6, &(0x7f00000002c0), {[{{@ipv6={@mcast1, @mcast1, [], [0xff], 'syz_tun\x00', 'vxcan1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @ipv4={[], [], @loopback}, [], [0x0, 0x0, 0x0, 0xcde72385a930f7dd], 'vlan0\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x0, 0x0, 0x40, 0x0, 0x72}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xfffffff9}}}, {{@ipv6={@ipv4={[], [], @empty}, @ipv4={[], [], @loopback}, [0x0, 0x0, 0xffffffff, 0xffffffff], [], 'lapb0\x00', 'team_slave_1\x00'}, 0x0, 0xc8, 0xf0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x40}}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@dev, 0x0, 0x31}}}, {{@uncond, 0x0, 0xc8, 0x108}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4c8], 0x12000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:44:13 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mq_notify(r7, &(0x7f0000000240)={0x0, 0xe, 0x0, @thr={&(0x7f0000000080)="409f0a7432cd9076956647596f2d7cc5ba7e14ab6ab029939fcb28dca996ea70ec49bc8f044be5eacffd8f5550b813e23e8534f0278c8411e816626ecbf8ef36d469d722a385bee99622ecc1f96aff159acc025c5536d12a3e2edbe2e57eb22f62a314ed9a4b3285ae30276d7dd44086bb1fbd3156993b28483558f6a79f4491ff00778da8989e316b260c49dc989522a54e22b2bec1efdc93412ca44ea9e9aa361eeb388d062673df4db1aa71d708d5a644d56ca6fa35f6ce6946d3efb96abd487161fbbc7a8bb3b6004b5900b7b5d7d60c9bc50ea96cae7c354224e02f4c336109b01424977c94a1b89b", &(0x7f0000000180)="2a1f1212f04ef2d85db4c86877ff7eaae96a7ef2a55de8895c357708155903a284513d0b8774b974f0110963a6734b7d18c0213bef0a5a5721bbe5db1d236c050b20b54a854297c04c7619e83b1e8711b9b3ddd108f474386a1d3171b2d08ce5bea0b3e0daa60080e81b531db3b95df6b792204f4f5d8660353762c42cc8620251f9bdbe10a1500a3225dfa38e6fafdb"}}) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:13 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6f"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1222.139685][T28787] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:13 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047000a0000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3f, 0x2a80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0xfaf) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0xc002, 0x3000, 0x6000, 0xd008], 0x7fffffff, 0x20, 0x13}) r5 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r12, 0x1c, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0x90) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r5, 0x0, 0x0) r13 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r13, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 1222.341754][T28798] kvm_hv_set_msr: 123 callbacks suppressed [ 1222.341771][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000005d data 0x4d00000000f [ 1222.400529][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000075 data 0x4d00000000f [ 1222.411381][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f [ 1222.422221][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000005b data 0x4d00000000f [ 1222.433456][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000002a data 0x4d00000000f 03:44:13 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="636c6561725f63616368652c654d6f735dc3b070635f64656275"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1222.444366][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004a data 0x4d00000000f [ 1222.467626][T28888] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1222.529248][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000062 data 0x4d00000000f [ 1222.562513][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000028 data 0x4d00000000f [ 1222.612859][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000074 data 0x4d00000000f [ 1222.673828][T28798] kvm [28794]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003a data 0x4d00000000f 03:44:14 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) listen(r2, 0x4000000020000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @loopback, 0x3}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x40000000000012e, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x4000000000002cd, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000040)=0x7fff) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r8, 0x4c00, r1) 03:44:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000000)={0xe}) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1222.889964][T28921] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:14 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6f"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:14 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x3, 0x0, 0x41bf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:44:14 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047000b0000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001d008151e00f80ecdb4cb9047e4865160b00010040000000000000190e000600000000010000000153b4", 0x33fe0}], 0x1}, 0x0) 03:44:14 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r0, 0x2, 0x10) semctl$GETVAL(r0, 0x6d6661f5eb212adf, 0xc, &(0x7f0000000380)=""/183) r1 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4206, r1) ptrace$getsig(0x8, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="b0190000850afe161329a176634a7bdf8a6825e48595d49b415cb106de5caa71572ca1ec8f97830af354c5536db54eee755d94de12408af5b8b2c77830d67d3e2b6f1e944646639ff1ca367f13fd4861e9bc1e5fe7f6df45ebe36c8a116408377b06244e4b2edcbb4f916aa4ddce49aa4ff4be3d2e4bb2a0f52b14f043bde15e0616529097942e6bb294ae2aa38dc7561a7732f3415afe7c9d6223cb210a4aec945a7991422d236490b4e557c3dee35ef170a336ad7febf0018d75479a65421e10ca76e354100e451ac8d7149305a092ab635312745b32e5", @ANYRES16=r7, @ANYBLOB="100325bd7000fedbdf25070000000900054afe2a80914eda520e11ca000300000008000500ffffffff5c00030008000400060000000800050056fc86f396b76f4f4e240000080004000100000014000200626f6e64"], 0x3}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x48, r7, 0x108, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4f5}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}]}, 0x48}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r7, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20040094}, 0x4001) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000004c0)={0x49, 0x5, 0xffff, "501d3cfb7de0ca06ae2d25f59c9e94ac6ffd70b376ed8abb093baa0aa45bbb3477b114e32a537068d27b48214d0857be646173ce3194393e7e707cfd992b32aedbf7cab11b569b2b6d"}) 03:44:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) rmdir(&(0x7f00000000c0)='./file0\x00') bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000100)='syz1\x00') r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000080)) [ 1223.405065][T29047] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 1223.773044][T29152] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000b59000/0x4000)=nil, 0x4000, 0x1000002, 0x48012, r2, 0xe0c83000) 03:44:15 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad3"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1225.603852][T29165] IPVS: ftp: loaded support on port[0] = 21 [ 1225.674796][T29165] chnl_net:caif_netlink_parms(): no params data found [ 1225.722438][T29165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.729572][T29165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.737091][T29165] device bridge_slave_0 entered promiscuous mode [ 1225.744924][T29165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.752183][T29165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.759905][T29165] device bridge_slave_1 entered promiscuous mode [ 1225.772063][ T7678] device bridge_slave_1 left promiscuous mode [ 1225.778326][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.829149][ T7678] device bridge_slave_0 left promiscuous mode [ 1225.835534][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.498697][ T7678] device hsr_slave_0 left promiscuous mode [ 1226.538537][ T7678] device hsr_slave_1 left promiscuous mode [ 1226.584767][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1226.594996][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1226.605132][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.641866][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.718339][ T7678] bond0 (unregistering): Released all slaves [ 1226.826877][T29165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.837527][T29165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.855692][T29165] team0: Port device team_slave_0 added [ 1226.862737][T29165] team0: Port device team_slave_1 added [ 1226.920409][T29165] device hsr_slave_0 entered promiscuous mode [ 1226.948565][T29165] device hsr_slave_1 entered promiscuous mode [ 1227.074591][T29165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.089120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1227.102932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1227.111023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1227.123168][T29165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.133136][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1227.144492][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1227.153269][T19183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.160394][T19183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.180870][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1227.191705][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1227.200774][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1227.212822][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.219870][T19184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.231278][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1227.240131][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1227.252298][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1227.272708][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1227.281045][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.292468][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.301084][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.313334][T29165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1227.331164][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1227.338942][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1227.350644][T29165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.537813][T29176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.545074][T29176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.617956][T29174] bond0: (slave bond_slave_1): Releasing backup interface 03:44:19 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000001c0)=0x9, 0x4) r3 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000), 0x43578cf5) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000000c0)={0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0xba, 0xfa00, {0x0, &(0x7f0000000f80)={0xffffffffffffffff}}}, 0xffffffffffffff40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000ae7a29e5e36fc3e001"}, r13}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r11, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x3, 0x10001, "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", 0x7c, 0x18, 0x20, 0x9, 0x80, 0x8, 0x2}, r13}}, 0x128) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) prctl$PR_SET_DUMPABLE(0x4, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000000)={0xfff}, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1f3) ptrace(0x4206, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$KVM_GET_SUPPORTED_CPUID(r11, 0xc008ae05, &(0x7f0000000440)=""/59) ioctl$VIDIOC_S_AUDIO(r16, 0x40345622, &(0x7f0000000180)={0x8, "4b214fb12cb8fee23344943b86df22767f265db247373975aa2895da251fbf59"}) ptrace$getsig(0x8, r3, 0x0, 0x0) 03:44:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) stat(0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="e187a48d30b3", @dev, [], {@ipv4={0x8848, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 03:44:19 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004700000300000000b600047479706500"/36], 0x269}}, 0x0) 03:44:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000b40000/0x3000)=nil, 0x3000, 0x1000002, 0x8012, r2, 0x0) 03:44:19 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad3"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1227.966621][T29181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:19 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz0\x00', @bcast, 0xc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x1, 0x0, 0x6, 0x3, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561725f68e107176c32090030c9652c64ab6503798ec8117b799a78d94c8b54ebb7fcf8188dde362c4607d2cc5847a861f1e7620ec851a64c889beb0366eb132d07ed851c2c1fb17751049b2123089cd2cfc19ddecbfcf61432cd529566cccef6687621997ebaa23425d9f8a23cdcee8fa81aac40f67ebe1e51cf53e0399abeeec53f"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r5 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) r6 = shmat(r5, &(0x7f0000dff000/0x3000)=nil, 0x800) shmdt(r6) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r10, 0x0, r9) ioctl$sock_ifreq(r9, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r11 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x2a, 0x0) preadv(r11, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:19 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200800, 0x0) getgroups(0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xee00]) setregid(r0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00fbb305eadcdde7260d33265487da6e4df5fd97c7397b12558c8a47b714ffe4effd89c5cb890ace9b65a14b46ba16e2408d8ba0de028c5cb7c49c81fcc637cf8d11456eee355362ce3dac29f627cd21093bf5700258e6d0a808e413f6577fc0f1d45f9f35638b2e3eac717984756c64fbb9a5d96759838ef60beb7e101ec5fdf77bccaf9678c27732b603000000bfc041757ac8616233ed02000000000000000000000000000000000000000000000000ce0a3943291396dcb1b97a590e8db21c143d33e9e426eb35c4a62b"], 0x1, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) pkey_free(0xffffffffffffffff) getsockname$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000008000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8, 0x15]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) 03:44:19 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad3"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r6 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000040)={0x10000, "88515e9b670b950bc956faa2ac850361462533d0b5bfd0f99f9d69e862dde73f"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={r7}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)={r7, 0x4, 0x16, "38f45aa5ce45f869392bfa97731283321dcf39b2c593"}, 0x1e) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x6, 0xffff, 0x9, 0x6, 0x4, 0x2, 0x7, {r7, @in={{0x2, 0x4e23, @multicast1}}, 0x7ff, 0x9, 0xed2, 0x7, 0x101}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={r8, @in6={{0xa, 0x4e23, 0xffffff81, @dev={0xfe, 0x80, [], 0xa}, 0xfffffffa}}, [0x1ff, 0x1ff, 0x7, 0x7, 0x3, 0x1000, 0x8, 0x7, 0x3ff, 0x4, 0x5, 0x3, 0x80, 0x3, 0x81]}, &(0x7f0000000200)=0x100) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x900c1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r9, 0x0) 03:44:19 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000040)={0x10000, "88515e9b670b950bc956faa2ac850361462533d0b5bfd0f99f9d69e862dde73f"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={r4}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)={r4, 0x4, 0x16, "38f45aa5ce45f869392bfa97731283321dcf39b2c593"}, 0x1e) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={r4, 0x3}, 0x8) [ 1228.298309][ C1] net_ratelimit: 14 callbacks suppressed [ 1228.298328][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.309762][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:19 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/300]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bgnd0\x00\x16\by\xff\x10H\x00\x00\x02\xff', @ifru_data=&(0x7f00000003c0)="ba70f936736a90aa1e73f71f6e7e5f728185cb919be6397ab8b92ef6cf0af4c9"}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:20 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:20 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708020000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:20 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000400)='\xb7\n\x8b\x9as\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)={[{@clear_cache='clear_cache'}, {@nodatasum='nodatasum'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000e2b000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmdt(r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$sock_ifreq(r8, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r10 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1228.721448][T29416] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x8002, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)) bind$rds(r4, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r5, 0x0) 03:44:20 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3c"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1228.858283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1228.864169][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:20 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup3(r1, r3, 0xc0000) write(r2, &(0x7f0000000000)="498b08e32643b07260e813e2f657ecf80e9b4548c91de5e27e0cbbbfd94582464b2b7e4537d56a81bb1e6e22a36092e2aae884aad1a7b3c11f11a5a021b53089a9091b0285a85761d30600dd097a78dd68fc8a66c8796b8a3953ae6eed02a88bc2b585fdb4804c23398af73d52ed8ad66eefd46a70b892e8844eedfa", 0x7c) ptrace(0x8, r0) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1229.098356][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.104159][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:20 executing program 5: r0 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2711, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0x100ea) 03:44:20 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200800, 0x0) getgroups(0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0xee00]) setregid(r0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00fbb305eadcdde7260d33265487da6e4df5fd97c7397b12558c8a47b714ffe4effd89c5cb890ace9b65a14b46ba16e2408d8ba0de028c5cb7c49c81fcc637cf8d11456eee355362ce3dac29f627cd21093bf5700258e6d0a808e413f6577fc0f1d45f9f35638b2e3eac717984756c64fbb9a5d96759838ef60beb7e101ec5fdf77bccaf9678c27732b603000000bfc041757ac8616233ed02000000000000000000000000000000000000000000000000ce0a3943291396dcb1b97a590e8db21c143d33e9e426eb35c4a62b"], 0x1, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) pkey_free(0xffffffffffffffff) getsockname$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000008000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x8, 0x15]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) [ 1229.316591][T29631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:20 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r3, r4, &(0x7f0000000000), 0xffff) fcntl$addseals(r4, 0x409, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) getpeername(r6, &(0x7f0000000180), &(0x7f00000000c0)=0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r4, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r8}]}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r10, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r9, r10, &(0x7f0000000000), 0xffff) fcntl$addseals(r10, 0x409, 0x8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x162) fsetxattr$system_posix_acl(r10, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', &(0x7f0000000580)={{}, {}, [], {}, [{0x8, 0x0, r12}]}, 0x2c, 0x0) getgroups(0x2, &(0x7f0000000040)=[r8, r12]) ioctl$TUNSETGROUP(r2, 0x400454ce, r13) ptrace$getsig(0x8, r0, 0x0, 0x0) 03:44:20 executing program 5: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) tkill(r0, 0xd) ptrace$getsig(0x420b, r0, 0x8, 0x0) 03:44:21 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3c"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:21 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708030000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:21 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@random="a9248e6e42e2", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x13}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x400000000000001f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @empty, @dev, {[@ssrr={0x89, 0xd, 0x0, [@broadcast, @empty, @dev, @broadcast, @loopback]}, @lsrr={0x83, 0x1b, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}]}}}}}}}, 0x0) [ 1229.790436][T29753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1229.818395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.824164][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:21 executing program 4: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3c"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1230.578708][ T7678] device bridge_slave_1 left promiscuous mode [ 1230.584919][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.628911][ T7678] device bridge_slave_0 left promiscuous mode [ 1230.635080][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.268690][ T7678] device hsr_slave_0 left promiscuous mode [ 1231.318384][ T7678] device hsr_slave_1 left promiscuous mode [ 1231.384375][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1231.394358][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1231.406685][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.478796][ T7678] bond0 (unregistering): Released all slaves [ 1231.643110][T29769] IPVS: ftp: loaded support on port[0] = 21 [ 1231.692501][T29769] chnl_net:caif_netlink_parms(): no params data found [ 1231.715736][T29769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.723059][T29769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.730774][T29769] device bridge_slave_0 entered promiscuous mode [ 1231.768364][T29769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.775537][T29769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.786168][T29769] device bridge_slave_1 entered promiscuous mode [ 1231.806434][T29769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.817235][T29769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.846558][T29769] team0: Port device team_slave_0 added [ 1231.855071][T29769] team0: Port device team_slave_1 added [ 1231.920149][T29769] device hsr_slave_0 entered promiscuous mode [ 1231.981421][T29769] device hsr_slave_1 entered promiscuous mode [ 1232.049085][T29769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.056128][T29769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.063442][T29769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.070498][T29769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.106418][T29769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.122099][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1232.133744][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.141677][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.154545][T29769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.165104][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1232.173944][T19183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.180996][T19183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.199848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1232.208225][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.215259][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.224064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1232.233107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1232.241881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1232.253499][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1232.264881][T29769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1232.276101][T29769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1232.284272][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1232.301443][T29769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.309883][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1232.317280][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1232.467587][T29779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.474889][T29779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.600076][T29779] bond0: (slave bond_slave_1): Releasing backup interface 03:44:24 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xacbe12401e43cc21}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r6 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561725f63616368652c656e6f7370635f64656275672c00fdad9b1c8fb159400e2099e968a1a5ab49a26f401f0b3ead3cb77bd12755b638c59dd59fa560d9ea9857642a0d54301fe5cd1610f72ef6665815dfc673"]) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r7 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r7) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) ioctl$sock_ifreq(r10, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r12 = accept4$rose(r5, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r12, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:24 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708030000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:24 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708040000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:24 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004700000300000000b600047479706500"/36], 0x269}}, 0x0) 03:44:24 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3c"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:24 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047f4070000000000b600047479706500"/36], 0x269}}, 0x0) [ 1232.988719][T29790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1233.020672][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.026706][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:24 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={',r', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1233.211038][T29793] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:24 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:24 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="6303018000fbffffff676770635f6465e9b3bd88dbb6a485000000"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:24 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000400)='\xb7\n\x8b\x9as\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)={[{@clear_cache='clear_cache'}, {@nodatasum='nodatasum'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000e2b000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmdt(r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$sock_ifreq(r8, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r10 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1233.360953][T29792] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1233.658280][ C1] net_ratelimit: 2 callbacks suppressed [ 1233.658289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.669633][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.703147][T29798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.711668][T29798] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:25 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1234.268305][T29791] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:44:25 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047f4070000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:25 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000400)='\xb7\n\x8b\x9as\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)={[{@clear_cache='clear_cache'}, {@nodatasum='nodatasum'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000e2b000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmdt(r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$sock_ifreq(r8, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r10 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1234.539362][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1234.545870][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1234.609700][T29795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:26 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708030000000000b600047479706500"/36], 0x269}}, 0x0) [ 1234.778276][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1234.784061][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:26 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708050000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:26 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1234.902016][T29808] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:26 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000400)='\xb7\n\x8b\x9as\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)={[{@clear_cache='clear_cache'}, {@nodatasum='nodatasum'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000e2b000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5000) shmdt(r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) ioctl$sock_ifreq(r8, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r10 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:26 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708040000000000b600047479706500"/36], 0x269}}, 0x0) [ 1235.098485][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1235.104505][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1235.226735][T29812] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1235.339639][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1235.345748][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:26 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:26 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1235.600513][T29817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1235.786679][ T7678] device bridge_slave_1 left promiscuous mode [ 1235.798380][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.851261][ T7678] device bridge_slave_0 left promiscuous mode [ 1235.857507][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.798474][ T7678] device hsr_slave_0 left promiscuous mode [ 1236.868412][ T7678] device hsr_slave_1 left promiscuous mode [ 1236.953910][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1236.963763][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1236.976204][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.028361][ T7678] bond0 (unregistering): Released all slaves [ 1237.114864][T29825] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1237.119230][T29830] IPVS: ftp: loaded support on port[0] = 21 [ 1237.260941][T29830] chnl_net:caif_netlink_parms(): no params data found [ 1237.291683][T29830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.300916][T29830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.309657][T29830] device bridge_slave_0 entered promiscuous mode [ 1237.317279][T29830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.326777][T29830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.335290][T29830] device bridge_slave_1 entered promiscuous mode [ 1237.356587][T29830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.375429][T29830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.407927][T29830] team0: Port device team_slave_0 added [ 1237.441300][T29830] team0: Port device team_slave_1 added [ 1237.500521][T29830] device hsr_slave_0 entered promiscuous mode [ 1237.558594][T29830] device hsr_slave_1 entered promiscuous mode [ 1237.613533][T29834] IPVS: ftp: loaded support on port[0] = 21 [ 1237.629169][T29830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.636192][T29830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.643516][T29830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.650620][T29830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.749551][T29830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.772913][T29834] chnl_net:caif_netlink_parms(): no params data found [ 1237.781879][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1237.790440][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.798511][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.810103][T29830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.841635][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1237.850319][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.857353][T10544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.865251][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1237.873673][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.880816][T10544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.890321][T29834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.897346][T29834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.905598][T29834] device bridge_slave_0 entered promiscuous mode [ 1237.913553][T29834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.920719][T29834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.929084][T29834] device bridge_slave_1 entered promiscuous mode [ 1237.954729][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1237.963752][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1237.972709][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1237.981116][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1237.989531][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1238.004588][T29830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1238.014125][T29834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.025107][T29834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.049519][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1238.056900][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1238.066348][T29830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.074297][T29834] team0: Port device team_slave_0 added [ 1238.081056][T29834] team0: Port device team_slave_1 added [ 1238.130257][T29834] device hsr_slave_0 entered promiscuous mode [ 1238.178521][T29834] device hsr_slave_1 entered promiscuous mode [ 1238.218563][T29834] debugfs: Directory 'hsr0' with parent '/' already present! [ 1238.306965][T29834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.317635][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1238.338067][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1238.382497][T29834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.392699][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1238.401970][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1238.410870][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.417897][T19184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.470124][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1238.478160][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1238.487032][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1238.495794][T19183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.502857][T19183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.515478][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1238.524894][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1238.537387][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1238.546270][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1238.559008][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1238.567890][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1238.581303][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1238.592277][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1238.602624][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1238.613246][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1238.624869][T29834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1238.677437][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1238.693671][T29834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.702682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1238.710560][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 03:44:30 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:30 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:30 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:30 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708030000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:30 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708060000000000b600047479706500"/36], 0x269}}, 0x0) [ 1238.802971][T29852] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1238.848274][ C0] net_ratelimit: 2 callbacks suppressed [ 1238.848282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.859755][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:30 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1238.968533][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1238.974664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.088609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.094701][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xc, 0x101000) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0x40, 0x0, [0x0, 0x2, 0x1, 0xbe]}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:44:30 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1239.240788][T29858] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1239.258278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.264040][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:30 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r4 = socket$inet6(0xa, 0x803, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='xmrvs\x00', 0x0, 0x0, 0x0, 0x0, 0x10003c, &(0x7f0000000740)=ANY=[@ANYPTR=&(0x7f00000017c0)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYRESDEC, @ANYPTR], @ANYRESHEX, @ANYRES32=r9, @ANYBLOB="4bdd5fcde1035a3d000029c826443cc3dd1850456f875446cf098ce219940fa17dc72c2c0019d1742b0b43bafd5330c602576f947c065301197fd7f30e55edc825a80b1493f94ed9755b8c00f9dd4c7a1ddf2bb3d6776372b76756e2edcf7654f08a089af56c235f1bfd2bf4bdfaa437f4fff86e7e010007c1c7d50979a40b9a74006f8da9b50045db5ec6e1a5d57a5e4872798a186f265953613cd92d5847a1c1d9019684d8aa50c5f1811ab1a28dc1d9b34e6eef102267aa00d58c7d76d7846150ec71c0bc2cf29a23", @ANYRESOCT=r12, @ANYRESOCT=r1, @ANYBLOB="b5b2b69def2ccb0db6f3b624101b2f0b84c3dceb673c73fe5060302d26f807139d235acba9ba2c58ffee6c0cfaaa922bfe9daa69420244c2d6c7e7d8f8dd00b21842ae4714248122ef71bd1c1b9adc27740f840ada2921df3783204e436176f096b9d6730e2b3dd75aa42cc34b8f126031089405c5b748b0b7bdedf12a30e4b352fec463eb4b4693726c9759b775fa1f087b91b4ea92ee8f4aca"], @ANYRES16=r6, @ANYBLOB="e8f2cdef8ccd3becdd04bb24f518a5942c84115202fd2e699691a734137ed8bfda76ff64c88abdb813ba29ed48a263a42fa5330f717fde5fdf6c2b3cacbcb6b60bd201980a690c299168bd0c376e64f5d4a6512705d84c14393118f55711d9b95d9da2331f25d6f311900d5e623318671e6c0d6f2f7dbcd68423ce32ecc0ec7bc18631e76bb0c8f53b3473af5851c4a4fc942b2fd537a997a49daf4e1b8761ad86e9f56b518cbec313402b1b4b95386986ddbfe047ca7157eb3bf8da78ed9ceb4e798d8df463daddbdd6a0676da616a4e12a6b4c1c31dc7fb6d3ca80efee4050eba910338ee2820dcc493455e9b825af483fe5a6506864f9c20399fa7af02df3c898b812b9cbae8068fc88822675fea5f547d9b2fde094e557b94bb3cd0c01f1a750832cf90da96a6dad5a281709991d8955920fd1863d790c1222724386ef3c53462a4ec6b4f731a66af00c17744e759c5a841894ed0a0f85769d866d2764b8f55ba488dedcb4856efb297803760b4c700350efd2c0ee0dc31d837b5b4643944d6f392431322dac8b342bc3054b43c933fd613f9598808aecd02c5ea11667d2915494497483800770463321db0a526e196d3011a84f6f09d3f3edd483c763a0a164a6f29e1d8c0a7c1cc3f4a214c20740ef703ccf37ce7aef2b5e13adc6a47d6c4788de96ec0ff38376d804654794de4ba605ebc4bc23dd7aabc84c9b1a462fb748ea06516a517182169b4842b06542627cfeb436f3348557aa3c248fc4a57322a0f4ea496cc09b246c9bba6461f9fd47ab3cc954475811eba50629d9d828b1bc60a227ad50c2a512667cb1d6213c86f4f49e86f80e418e4f545251052b303768694a10e6d0dae714419a929f12bb903d07aea7860c464a1616303cf7dc35e5c36f6719798f7902c8ec0bcb1ebeeb7239817eaba410920d19b770d880bc014e9b35966ca8a2c112f3aadd63cc050c3c79e27b9921c098ba39883c8b33b5c3af0bbca150367f42819ae05250089b2e810daed3d5705af3102d4b4fafb48f8f848d72d7dcec972c0aaf63dbb764726ba01197765e163f83b49133c4f38bc6f51bc7411256788280371ea6c613e2d384cc0c772831d0c2c13dad7af01436df9cb3bbef0af21810d0f25cf812aacba668869e8eec111b25eb766feeed8aa8a5b1e5a657decaacd755255b20faf0e2fe8770f0a106f390124a84a8ab61f6a20315041fac065851a68ea98ad7d779c604d0257e411c47f17bb531a15ff5689ea00363e1c033a7b42f76b3f8713e474590fabf3b557f38a0b6088614ea5f4e510dfa3fb964cf445f9b41387809c4874cce329ea8204d2a59b2b2478890304a8a31be02971d6a5a76d54607b5620140023e0133b25cab7310248c059e1d5bad974b2f7bf047d305079e077f45590e55faf859c281efb16d746d2219dadbc17ccecc45fcf5a5e0eae29747f3fac554a0fede350e88f852bba5e78c532b0c7b4ada45742531b26ac64e5dcd3e5a706e9328f8e7dda32c2bd929e78bc01dbb0bc0716f23d5cd266c82fd2a196fec48f353d13d83fd8bac42a287cfb4cfd1236d950b282d3fb8dba8585de184cc9b44f4a4a7074577811d603d4b862ce654c7fc673d6b77f3c5732b66b4b216da9e3d1a59c9989d4a0e1d8a88ef0d416159ff9a171f6e41b620dd7d2c89635c1bec919c35708d93ee3358eac752a029918dca5ac9b37d059b08f23033fa339ac6892323cf5c46c1fc0946c5f066bd205d1de59ef81c3823c5a3197625028a2654f2a9e87a6b82be69fd6ff2771599ac2136b5318f12fc47f4f7175b5910368015c3b83f8e82da08bedf713f02aa7a51817c37508755c18d41ca2949893ae86926347d5c83e509c781d30587db21426dfa89a9202323b87d75507b08187156f13a23f9727032dd10356c448583c281dfaaa2b13c7f1ac7584b3e9e02bb240807d27698374f698ff539b6e10c791b1e1e32478b582b8343bb01678b10794d1c7889de6671c70da6f21581b184478ba02886c98cc7c2ff7b7d44a1ece8365f44339c8253ef7d16a7de325726d00d3fd3e704c74d883e398592b39b3ab03c6ee14ab368644421ce84a384dc243a22aeb0653c267e8cc2705fa9a3bd3ced7920dc7018ce5c2de48917f85e1a225216dc0b103b3f52f83a8766c177ceccb3511357d1242afb3d7e5d449bf0144542b50cc27d09a6f402c9c041dca0db4acbb6d8f18106e37d7752c657f5409d769c5aadc7ee0744902bf3ce1585b7c8a70a8f7928c1b25398fe1b1b7c7bfe6402e87c86946fcc15e575413c77da05db4c2e671a0a74da6ff7523a5d4fd5e0439159a8a3b15c32def1e21295ddb427ec21a85ad6e85d78a3b51f81246b215e2d93653961d9dc9644ea27e337317bc03cee348172a40f15cebcdf9900827809f0e48e7006141404c0efe9fba544e6970e007f2eeec3a08248bbf22f457ffd13d0fb77fcc29ac79e7b64cb828c457769f8088beed4c58a047941d8555a0eaab8c047c5dc87623eca1769744d52cbcd183c974fdb793826fccddb8868c71b55f5cfb89406f23ce85fef85c4f0fb63dfa3e345783ce9a789072cc9c45e10813de5e6a03b3173f94e9fec8276938be91c995a149c9fe4d41be1b12d0a96768d7f8226bb1f2029264af8688527101863717316c05cf8b206aa33845574f71c4436b9761a4fd9e26b8bf111bf7fa8fbea91a00a8d1a93900cd890af3b74c81b5c5f882c73fcc99d44e2e622c3d94239a1e071d935abd7905213ff8fb75a5ac04766e704c272f702514fb2c70a3bfa6058cdb6a7f3a0b3780de68a9df73f538b9b7d9d791a799a4c0df5e70ea1e676730081649fe075c5183b23a605ed2cd9287f5bf91b7c50168efd4b53904104d7d0d8524ca4a97e2420bafec01d07e68af431fe253f0da58eae613ded4a5519c2ee5acef02f80f502e83df050c333a692749fe8bcc81d6827ed4ee4b085b98c34beba24fa22d31a5b0ee4111cfb1967ffaa834837bbac2b78aaf4105b34a96791fd38044d4eda0d3277fb4a74f3a5038455b35386b8587569bb300f5027871f3438f8e4110341d127ca64726f6f881245fff12b2f17a6e7c75a7f141c20da2f43dea0132830370376f25ff6367e20def5bfb49f4473c2b2326b001f29e504f897d29a4d4134322a8c01772bbea91a44984a36381147019c4365d43fc57b800ad4313fc26abe21754f82aa86989c2e220ae1945faff7041ad69ef4d168902dd0630aa44098e850fec2bb9e131a1070da045a49e243313319843834bfbfb007038bcedac90c25be3b94514ee485a93c845f42eb6e9eeca67cb89db0db6bb58fb533d8ec08e0c5530b3dec77535ef15d0ee7426972e542e7b0a2bd4cae29856f66baca789b85cf0b88a5b1d0f1dd36bc122fad522dd405e3e1ff6e5f5a39f9b896ffe8355636cc31955e1044373c1aebe62fb575decbb23e73442018035ef1e51c9e2f1c8a8543b345cc9c7660c5492a71a5d05d233ae34f572c9c3c575fbca531f6583027b604cfba64381533a47e59fc14dc0854c35c830c0cf88d693d7e28c24083dbd6429e61952d4f3d65ef00f048253090c8efdebbeb12936590a85c76715babc10539e5a3dbaa29b1f4611feb8791ab708c455a5a4701140a50db244b6b3b5c27ff8a37d1e792921fbf5cb7ef5b8e274c7742269f5888a14736f32790b2f760c3500d7e616c95f3c156e158e268deb333e6235c156a9a3b38cbe49ff535dfbf95b5168ec00cd15cbc0dcc316bfa5aecc89eda9274993706eebe3c32507f00897b425d54fbe5ca3c5fb01d6da04b0b9fd0f11e53345882adf5f5bcf5a61fa4e9da70019ecd9a81293235ff7859e4c721785445316e2cf0c1acd1946eb1bc6eded5aa7115f082cf27e6b14b04bf2a86aaabb7df0e7938769548655a2b9d8d340dc11a58052dabd6706afcd9c5916ec231ae0aeee98629f0ac635985c92f3427c644b8f926e131dd718a9c0fc93a6b30104b0679fb97d547aa48dbda6518825a2cf8b1c17884e749793fc9faf569e4b5719539478bd4144c66d2e43bdcc1c38ccee9b636649befdb3227e0d3214a9b948cc072481299370a8ac529e70e29467382f3cbce745bd826384e52dc557af98f29a2d8e64aa84544051c7cbdd434f7c835b6d4c399ce08eb86eb746879b7b0c1ecf7192e03d0b3837a18ca65ad22d323f7a7b0b7725f7245fa0054e61a048e620e5bbfb2e94f6f58ced75cba6edf13af3fbdfd2351ba13dec0b38a085181e069c10ca9b055f6f0f02e8220ab039bbf12bc00e18311a4d849bacc84804511cc43aaec8ccd967872cbef74c9eebee22f9ddebb334ea12f52c5660c29a3b03bd50584e97e9c487e0ecd1ac9e958b5fa31c46137010a49b6fc0e5cdeec5933612d5f6281bc0e448490dfd6e27d4723b7aa689147d8d8a920016489cbc1e52b25e7f31c96d895f14fae8240c2d03c4992a5475591f957ebee4361bc7e2649d395baf1e30f382629bb5cec3089297727c0b556b7282c10b8313ad864c47933ad2fc21e15adf8fa63f156a932bcde9cf82cae11853d0598907066a644d1f9234816008657decb0dcddcfaad7dc6e4f4dc50e44df7c3724e73f520cc15dba48d26683aff77dd989097eaf11acd7fefbc59d0816ae50469feab3ac02d50de9f8d4b4fa65ee3ae1f35b86927853fb0897a2765b6b61d1aee2a9b31f99bfe24734247a3a95115330165bcce1f137238a197546daab3db2f5b948cca4d35b4cb15ee18df81db7018171084812d9156c23818f6c0963b207dd9c13bef5a014ad2bc42d89179dc169b36c15ed210aec8e3518a14604cae37d58fff76222c200dddd29977b5c3b5925b0bf5eec135eea997588c6156f0e7ea95d0b1aa1004d52cf9841fe10c7526ebf070b8e4cc7ea1aa48ff56f570bb9008cce35c9652cc88d1138f00e693c03bd1f8851731c87af06b6eb8084c8e89837923ac3f68a50233fbd0a2396ed6df0defd0aabdf6b93a26e9919978c21e316fb54ba1315e9fd5770542e8697309926e62ff326dcf5fbe3b451a444db01e729e06936591952aaf21859396a47fb5c7c411ddcdd77a0a89c8735adfe2215b53e90e1256521fd0ade0c6fc41f21835d66bc084e0b18b7cbb7cb7d4761989d8f23ddc529c28b45ccbe75ddb427e29c3034027ac4a703aadbb497613c07b24082e58984ae9d8f0b09877bbf18601c6ea66d198b671d87e84f047e9f7358793a97924ed946654aceacf91cd96f08cee8eb55268a6a315353bf0dab8a941a7d78c74066ec3c819d9e631086c6b2d2b7cdc64d827e061d5ac44d50d4ba14fd8928cda16cdcb4f70057529366f92b78b9e07806c93b249d6fbc49133bc2548cafa242c97361ce162ef30919eea62c546a7843c461dae460423b4490833e4dee096221a18ab6797c3dd3506030c3f3e8d63b0a4ca7cd2a0326e8fd82de86a8773f46403bf87842c41cd9ad79ea317e7054a5b5bcac6a6a2ed3d10ea7a5fb6b99ac39a9fbb6f29838cec4caa0b5b5762c1683037d5ebfb875592dbe10a97e7566ae4e079215b16d7e5a13449b96eea56081fcd59438b9ab0a6a610c40bb05c89db6f709d4100f44afea3ccbaa413ffe54e661584ea3d05a4ead6d97c255306afe74c84c9d5cf4168df05903d3aad74eb1a3951688ba2a48527ebea95faebbef6428cc88b9badb7e0d8f8d865e2ea1e3bc68e55426d71d8c03e313a64d2cec81e18e18eef6a026463f4e6ff9abd2d414529d76f4b1888a6d4c52f6dd13be7eab9bab763154513010bdd", @ANYBLOB="1b1bc2e5c474575eec10307ec98b57257171c5488b1bec341eed291108d771c2d3fd8ba3f649d471f38f324122fa07c0c02f3d90a9237bcb111668d801", @ANYRESHEX=r2, @ANYRESOCT=r7]) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r13 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r13) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r15, 0x0, r14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r17, 0x0, r16) ioctl$sock_ifreq(r16, 0x8917, &(0x7f0000000240)={'ip_vti0\x00', @ifru_names='caif0\x00'}) r18 = accept4$rose(r3, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r18, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1239.498413][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1239.504281][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1239.617877][T29862] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:31 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004768000000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xc, 0x101000) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000080)={0x40, 0x0, [0x0, 0x2, 0x1, 0xbe]}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:44:31 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200001e000000000000800008000bf9ff0000fb0310290000000c000b000000000000020000140006000000f0c50000000050bad365f4f4626a6a6a190000040100829e30a958be0200d3889c0d048000000000"], 0x6c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 03:44:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000080)={0x29, 0x1, 0x35, "8a36856b597a9554e8d51cc6993a96d0e611fa23a8575453cbfd2d8febab46c1b80ef8a128a9519d8499017ee344e09190e0d0a846851458de2c458e", 0x2a, "6046c069294eba260fc17afb8b1b5dd5363e168cbe8d39594a894c699b38e7b0c0bd7714b32ebc2c0388b0e2b0092dec0ab5239e018cf673201f4243", 0x60}) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 03:44:31 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d9879"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1239.787375][T29873] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1239.856993][ T7678] device bridge_slave_1 left promiscuous mode [ 1239.879588][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.959008][ T7678] device bridge_slave_0 left promiscuous mode [ 1239.969922][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:31 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004712000000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:31 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r3, r2, 0xd, 0x2}, 0xd) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r4, &(0x7f0000000580)=r6, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000500)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e00)={r6, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)='vmnet0!keyring/:\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0x0, r1, 0x0, 0x5, &(0x7f0000000440)='f2fs\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='vboxnet0^J!vboxnet0posix_acl_access\x00', r7}, 0x30) sched_setattr(r8, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x3f, 0x10000, 0x7f, 0x4, 0x5}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r10) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1241.638513][ T7678] device hsr_slave_0 left promiscuous mode [ 1241.708269][ T7678] device hsr_slave_1 left promiscuous mode [ 1241.765023][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1241.775264][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1241.785108][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.831368][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.889007][ T7678] bond0 (unregistering): Released all slaves 03:44:33 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d9879"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:33 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708070000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:33 executing program 4: clone(0x47fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r3, r2, 0xd, 0x2}, 0xd) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r4, &(0x7f0000000580)=r6, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x7, 0x8, 0x2}, &(0x7f0000000500)=0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x81}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e00)={r6, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000dc0)='vmnet0!keyring/:\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0x0, r1, 0x0, 0x5, &(0x7f0000000440)='f2fs\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='vboxnet0^J!vboxnet0posix_acl_access\x00', r7}, 0x30) sched_setattr(r8, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x3f, 0x10000, 0x7f, 0x4, 0x5}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r10) ptrace$getsig(0x8, r0, 0x0, 0x0) [ 1241.994815][T29883] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1242.074943][T29886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:33 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004768000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1242.222497][T29997] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:33 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004712000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1242.489255][T30059] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 03:44:34 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d9879"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1242.744974][T30107] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1242.806540][T30110] IPVS: ftp: loaded support on port[0] = 21 [ 1242.818047][T30108] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 03:44:34 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d9879"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1243.245779][T30110] chnl_net:caif_netlink_parms(): no params data found [ 1243.311794][T30120] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1243.372634][T30110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.402691][T30110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.419280][T30110] device bridge_slave_0 entered promiscuous mode [ 1243.426685][T30110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.466380][T30110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.477547][T30110] device bridge_slave_1 entered promiscuous mode [ 1243.507992][T30110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.522294][T30110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.540529][T30110] team0: Port device team_slave_0 added [ 1243.547084][T30110] team0: Port device team_slave_1 added [ 1243.600002][T30110] device hsr_slave_0 entered promiscuous mode [ 1243.658657][T30110] device hsr_slave_1 entered promiscuous mode [ 1243.698404][T30110] debugfs: Directory 'hsr0' with parent '/' already present! [ 1243.715842][T30110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.722959][T30110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.730304][T30110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.737310][T30110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.768637][T30110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.779567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1243.787621][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.795478][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.804537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1243.816319][T30110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.826938][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1243.835909][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.842948][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.860162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1243.868895][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.875921][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.889031][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1243.897619][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1243.907369][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1243.917417][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1243.928119][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1243.937782][T30110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1243.952581][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1243.960220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1243.970730][T30110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.096444][T30131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.103867][T30131] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:35 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="636c65616c5f635f646500000000000000900000000000000000"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:35 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004709000000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:35 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708080000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:35 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x581380) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000080)={0x20, 0x2, 0x4c2, 0x80, 0x7}) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r2, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 03:44:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) bind$rds(r1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 1244.510130][T30145] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:44:36 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200001e000000000000800008000bf9ff0000fb0310290000000c000b000000000000020000140006000000f0c50000000050bad365f4f4626a6a6a190000040100829e30a958be0200d3889c0d048000000000"], 0x6c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 03:44:36 executing program 5: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0='bpq0\x00', 0x6, 'syz1\x00', @bcast, 0x8, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1244.619244][ C0] net_ratelimit: 12 callbacks suppressed [ 1244.619279][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.630922][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:36 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1244.914403][T30153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.921678][T30153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.938323][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.944086][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:36 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1245.369720][T30151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.378450][T30151] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:37 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7c, 0xea, 0x1f, 0x8, 0x401, 0x2, 0x3, 0x1, 0x19a, 0x38, 0x40, 0x1, 0x8, 0x20, 0x2, 0x0, 0x7b1}, [{0x0, 0x4, 0x101, 0x3ff, 0x8, 0xfff, 0x10000, 0x30000}, {0x1, 0x4, 0x8b0, 0x3, 0x1, 0x1, 0x18, 0xc8d2}], "6a188cab71831c4040ecab7dac6fda99517bbd45c826a8619d37fc33f15e50fea7f978eb8a52cb589fcb7975062a3339a8b7e2c9a995bce37ab0d4e5e746bed761c6ec2f85a5acc1c5a53938446350709cdb6b07b31fcfc1388971d427192cb4561facacdc9fc8ce863a167f396a8c26e49e79c3306c1505e20727e5d645744e69b40ee7f57d6969e4b807e6bdbe02c14850bbb12ee9e9", [[], [], [], []]}, 0x50f) r8 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r8, 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r9, 0x0) 03:44:37 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1246.245029][T30144] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:37 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004709000000000000b600047479706500"/36], 0x269}}, 0x0) [ 1246.458285][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.464059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1246.645524][T30171] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1246.698269][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1246.704158][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:38 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708090000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7c, 0xea, 0x1f, 0x8, 0x401, 0x2, 0x3, 0x1, 0x19a, 0x38, 0x40, 0x1, 0x8, 0x20, 0x2, 0x0, 0x7b1}, [{0x0, 0x4, 0x101, 0x3ff, 0x8, 0xfff, 0x10000, 0x30000}, {0x1, 0x4, 0x8b0, 0x3, 0x1, 0x1, 0x18, 0xc8d2}], "6a188cab71831c4040ecab7dac6fda99517bbd45c826a8619d37fc33f15e50fea7f978eb8a52cb589fcb7975062a3339a8b7e2c9a995bce37ab0d4e5e746bed761c6ec2f85a5acc1c5a53938446350709cdb6b07b31fcfc1388971d427192cb4561facacdc9fc8ce863a167f396a8c26e49e79c3306c1505e20727e5d645744e69b40ee7f57d6969e4b807e6bdbe02c14850bbb12ee9e9", [[], [], [], []]}, 0x50f) r8 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r8, 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r9, 0x0) 03:44:38 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200001e000000000000800008000bf9ff0000fb0310290000000c000b000000000000020000140006000000f0c50000000050bad365f4f4626a6a6a190000040100829e30a958be0200d3889c0d048000000000"], 0x6c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) 03:44:38 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:38 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1404, &(0x7f00000004c0)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}], [{@uid_eq={'uid', 0x3d, r4}}, {@dont_appraise='dont_appraise'}, {@subj_user={'subj_user'}}, {@obj_role={'obj_role', 0x3d, 'btrfs\x00'}}, {@fsname={'fsname', 0x3d, '{:selinux\x9dwlan1vmnet1wlan0&selinux)eth0security\''}}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r5 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000e00000/0x200000)=nil) r6 = shmat(r5, &(0x7f0000fed000/0x1000)=nil, 0x6ffd) shmdt(r6) r7 = shmget$private(0x0, 0x200000, 0x0, &(0x7f0000e00000/0x200000)=nil) r8 = shmat(r7, &(0x7f0000fed000/0x1000)=nil, 0x6ffd) shmdt(r8) shmdt(r8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r10, 0x0, r9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r12, 0x0, r11) ioctl$sock_ifreq(r11, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r13 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r13, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000180)) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7c, 0xea, 0x1f, 0x8, 0x401, 0x2, 0x3, 0x1, 0x19a, 0x38, 0x40, 0x1, 0x8, 0x20, 0x2, 0x0, 0x7b1}, [{0x0, 0x4, 0x101, 0x3ff, 0x8, 0xfff, 0x10000, 0x30000}, {0x1, 0x4, 0x8b0, 0x3, 0x1, 0x1, 0x18, 0xc8d2}], "6a188cab71831c4040ecab7dac6fda99517bbd45c826a8619d37fc33f15e50fea7f978eb8a52cb589fcb7975062a3339a8b7e2c9a995bce37ab0d4e5e746bed761c6ec2f85a5acc1c5a53938446350709cdb6b07b31fcfc1388971d427192cb4561facacdc9fc8ce863a167f396a8c26e49e79c3306c1505e20727e5d645744e69b40ee7f57d6969e4b807e6bdbe02c14850bbb12ee9e9", [[], [], [], []]}, 0x50f) r8 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)) bind$rds(r8, 0x0, 0x0) r9 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r9, 0x0) [ 1247.019535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1247.025661][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:38 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:38 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200001e000000000000800008000bf9ff0000fb0310290000000c000b000000000000020000140006000000f0c50000000050bad365f4f4626a6a6a190000040100829e30a958be0200d3889c0d048000000000"], 0x6c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) [ 1247.282117][T30178] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:38 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004709000000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:38 executing program 0: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1247.483105][ T7678] device bridge_slave_1 left promiscuous mode [ 1247.490498][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.568911][ T7678] device bridge_slave_0 left promiscuous mode [ 1247.576248][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:39 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:39 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1249.288514][ T7678] device hsr_slave_0 left promiscuous mode [ 1249.348345][ T7678] device hsr_slave_1 left promiscuous mode [ 1249.414166][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1249.425094][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1249.435323][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.471663][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.549115][ T7678] bond0 (unregistering): Released all slaves [ 1249.659445][T30184] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1249.660416][T30195] IPVS: ftp: loaded support on port[0] = 21 [ 1249.698373][T30186] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:41 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047080a0000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:41 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:41 executing program 4: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0xf33, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x40) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x2, 0x0) r10 = accept4$rose(r9, &(0x7f0000000640)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f00000005c0)=0x196, 0x800) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1249.852849][T30195] chnl_net:caif_netlink_parms(): no params data found [ 1249.869895][T30204] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1250.074763][T30201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.083238][T30201] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:41 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1250.298312][ C1] net_ratelimit: 6 callbacks suppressed [ 1250.298322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.309670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.538744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.544800][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.622322][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1250.628384][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.694473][T30195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.706194][T30195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.752123][T30195] device bridge_slave_0 entered promiscuous mode [ 1250.783247][T30311] IPVS: ftp: loaded support on port[0] = 21 [ 1250.817408][T30309] IPVS: ftp: loaded support on port[0] = 21 [ 1250.827081][T30195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.868567][T30195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.900192][T30195] device bridge_slave_1 entered promiscuous mode [ 1250.990344][T30195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.020255][T30195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.056497][T30195] team0: Port device team_slave_0 added [ 1251.080042][T30195] team0: Port device team_slave_1 added [ 1251.200517][T30195] device hsr_slave_0 entered promiscuous mode [ 1251.258500][T30195] device hsr_slave_1 entered promiscuous mode [ 1251.522518][T30309] chnl_net:caif_netlink_parms(): no params data found [ 1251.556557][T30311] chnl_net:caif_netlink_parms(): no params data found [ 1251.658098][T30309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.679886][T30309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.695335][T30309] device bridge_slave_0 entered promiscuous mode [ 1251.712164][T30309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.731025][T30309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.752222][T30309] device bridge_slave_1 entered promiscuous mode [ 1251.762443][T30311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.785517][T30311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.799121][T30311] device bridge_slave_0 entered promiscuous mode [ 1251.900506][T30311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.907587][T30311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.918036][T30311] device bridge_slave_1 entered promiscuous mode [ 1251.926383][T30309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.937171][T30309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.979284][T30311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.989375][T30309] team0: Port device team_slave_0 added [ 1251.996405][T30311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.021129][T30309] team0: Port device team_slave_1 added [ 1252.032590][T30311] team0: Port device team_slave_0 added [ 1252.050741][T30195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.070671][T30311] team0: Port device team_slave_1 added [ 1252.120262][T30309] device hsr_slave_0 entered promiscuous mode [ 1252.159553][T30309] device hsr_slave_1 entered promiscuous mode [ 1252.198789][T30309] debugfs: Directory 'hsr0' with parent '/' already present! [ 1252.347920][T30195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.363589][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1252.371433][ T44] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1252.450575][T30311] device hsr_slave_0 entered promiscuous mode [ 1252.488560][T30311] device hsr_slave_1 entered promiscuous mode [ 1252.539347][T30311] debugfs: Directory 'hsr0' with parent '/' already present! [ 1252.633846][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1252.642588][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1252.650938][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.657979][T19184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.666091][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1252.674767][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1252.683156][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.690209][T19184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.697958][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1252.707348][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1252.731919][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1252.824176][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1252.832912][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1252.850473][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1252.858772][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1252.867318][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1252.875977][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1252.884505][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1252.895268][T30195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1252.906206][T30195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1252.985774][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1252.994371][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1253.009845][T30311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.031167][T30311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.038314][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1253.046252][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1253.060461][T30195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.067921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1253.075863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1253.092819][T30309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.104540][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1253.118123][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1253.126999][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.134122][T10544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.142253][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1253.150823][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1253.162415][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.169484][T10544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.177278][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1253.185226][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1253.193080][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1253.275284][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1253.286395][T30309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.298720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1253.307175][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1253.316111][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.323164][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.331199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1253.340370][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1253.465907][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1253.474630][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1253.483564][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1253.492107][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1253.500730][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.507737][T19184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.515930][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1253.530448][T30325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.538445][T30325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.654760][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1253.673916][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1253.682849][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1253.691397][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1253.702414][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1253.711631][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1253.720202][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1253.728823][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1253.737388][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1253.746531][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1253.755049][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1253.763206][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1253.771531][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1253.779865][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1253.787974][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1253.796651][T19183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1253.879728][T30328] bond0: (slave bond_slave_1): Releasing backup interface 03:44:45 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="636c6561725f63614368652c65268c4a17635f64656275672c00f92aaef03720463ebc7d2981878e0d"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000280)=0x40, 0x0) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1253.941315][T30309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1253.956252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1253.966040][T30311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1254.066936][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1254.074393][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1254.081768][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1254.089898][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1254.156739][T30311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.251999][T30309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.438922][T30343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.446192][T30343] bridge0: port 1(bridge_slave_0) entered disabled state 03:44:46 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:46 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:46 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047080b0000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:46 executing program 4: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000e00000/0x200000)=nil, 0x200000}, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0xf33, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="636c653a579a14fc96a8740d981b0000ada8060000000000000000000000ae178f52c06c747db07f696bcf3e76c168574c828d9fd7c567d944323a9b5f5e289472fab41a78d7f097cf14bc86c754b064aed81590c64214869d5c3a4b7cf268aa4b9cc064693cdb59fcec8b3f9354c93ff1790702b9681c4f653e6f4afb4ec051ab1845909dfc8bfcb03332eb3d462a44be6b12ef086e7aaa2d69bc78672f7c9204ff990358670b3b77f8b06dada042c305108af7a0136c1a8507000000a4d3b616a9816529a300000000000000000000000000000000f65bc0bf7baa61a9c550e39188d20fbf50d686bb01344dad6f6a5106186ccc90380704f4e32b5873b718f2a688f14ab68eda02181d3fe81d7ed201544808cd3c4b0c5d7d6292c47880a5dd2ca74c14c46c714e64b8c6c149f091d778fe63197dd57013903aedc5cc585d7c00bebab2dfb87a7058212f7b59669783b61e25c8a79d88e72bc8247e37f929a96e6c820f105f40a3f92b1b16fea9ff5cece2a5237ce21a9153d0a849e8935a19c98025914163acb1627bee1c250f6931250b63fbf45e03af5f04583df959c7ff84fa004f3af090"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x40) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x2, 0x0) r10 = accept4$rose(r9, &(0x7f0000000640)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f00000005c0)=0x196, 0x800) preadv(r10, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 03:44:46 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708090000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:46 executing program 1: unshare(0x2040400) msgget$private(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xceab071b94da5ff2}) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @bcast, 0x9, 0x3, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x400000000}, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x14, &(0x7f0000001780)={[{@clear_cache='clear_cache'}, {@enospc_debug='enospc_debug'}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r4 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r6, 0x0, r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r8, 0x0, r7) ioctl$sock_ifreq(r7, 0x8917, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='caif0\x00'}) r9 = accept4$rose(r2, &(0x7f0000000500)=@full={0xb, @remote, @remote, 0x0, [@null, @netrom, @remote, @default, @netrom, @null]}, &(0x7f0000000200)=0xffffffe1, 0x80000) preadv(r9, &(0x7f0000001380), 0x207, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 1254.566537][T30353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1254.698482][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.704542][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.778481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.784620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.927278][T30358] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:46 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, 0x0, 0x0) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1255.201479][T30357] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:44:46 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708090000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$rds(r6, 0x0, 0xffffffffffffff58) r7 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r7, 0x0) 03:44:46 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047080d0000000000b600047479706500"/36], 0x269}}, 0x0) 03:44:47 executing program 0: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000023004708090000000000b600047479706500"/36], 0x269}}, 0x0) [ 1255.584669][T30366] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1255.742396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1255.748520][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:47 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, 0x0, 0x0) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) 03:44:47 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000240)=0xffffffffffffffff, 0x31a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0x7f, 0x5}, @mss={0x2, 0x6}, @mss={0x2, 0x3}, @sack_perm, @sack_perm, @window={0x3, 0x2, 0x8}, @sack_perm, @window={0x3, 0xfff9, 0x46eb}, @timestamp], 0x9) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="153ced769ab9884881dbe9457e9176a4848e6e1bf58263b5041d28e40cbb59a2d8cc862e8d48d314044d29ae6f1a22e83f88dccf80cae5c9e87944fc411f0962367734b3486075238d8746df81260c3940d83bbc7a70ac892be2b19e82b822050abc12675a521779afc82e00046ac8c506154dd6f063912e9ee2"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0), 0x0) sendmmsg(r4, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2b0d2cb6a8a51f9cbba6cbf8066329c39b6fc983a66ac7df17b86dd588994b7e1201502e4f64e62e13634206373a316907b3a36650694feec30101283baa0e6fb2ffd4df34ac82e3ffe95843cca9b537a67c8ebe63f4236c08844cde0dc17ad36a1bd5f4c987aecfa413a0fe58b5ff3cade22fb9265c6bf4e850f68d98792d"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, 0x0, 0x0) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r6, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000440)={0xb929b581c5b30b7e, 0x70, 0x7, 0x6, 0x1, 0x71, 0x0, 0x400, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x4, @perf_config_ext={0x1f}, 0x1000, 0xff, 0xffff957a, 0x6, 0x7, 0x8001, 0x132}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) ioctl$FICLONE(r7, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0xfffffffffffffe15) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 1255.872051][T30371] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1255.898297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1255.904058][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:44:47 executing program 3: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047080e0000000000b600047479706500"/36], 0x269}}, 0x0) [ 1256.133185][ T7678] device bridge_slave_1 left promiscuous mode [ 1256.156359][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.176203][T30380] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:47 executing program 5: accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xd2b1, 0x3, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x80000000}, {0xd5a, 0x1, 0x1f, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000230047080d0000000000b600047479706500"/36], 0x269}}, 0x0) [ 1256.248912][ T7678] device bridge_slave_0 left promiscuous mode [ 1256.255154][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.333464][ T7678] device bridge_slave_1 left promiscuous mode [ 1256.347902][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.429054][ T7678] device bridge_slave_0 left promiscuous mode [ 1256.435255][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.468270][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.474038][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.479804][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.485541][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.519852][ T7678] device bridge_slave_1 left promiscuous mode [ 1256.526108][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.538291][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.544079][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.599163][ T7678] device bridge_slave_0 left promiscuous mode [ 1256.605398][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.678500][ T7678] device hsr_slave_0 left promiscuous mode [ 1258.728390][ T7678] device hsr_slave_1 left promiscuous mode [ 1258.775328][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1258.785512][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1258.795486][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.852266][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.941017][ T7678] bond0 (unregistering): Released all slaves [ 1259.108538][ T7678] device hsr_slave_0 left promiscuous mode [ 1259.168358][ T7678] device hsr_slave_1 left promiscuous mode [ 1259.235177][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1259.245517][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1259.255523][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.292085][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.370243][ T7678] bond0 (unregistering): Released all slaves [ 1259.518542][ T7678] device hsr_slave_0 left promiscuous mode [ 1259.558365][ T7678] device hsr_slave_1 left promiscuous mode [ 1259.605230][ T7678] team0 (unregistering): Port device team_slave_1 removed [ 1259.615163][ T7678] team0 (unregistering): Port device team_slave_0 removed [ 1259.629767][ T7678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.681989][ T7678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.767531][ T7678] bond0 (unregistering): Released all slaves [ 1259.876194][T30392] IPVS: ftp: loaded support on port[0] = 21 [ 1259.876269][T30389] IPVS: ftp: loaded support on port[0] = 21 [ 1259.908439][T30383] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1259.913313][T30393] IPVS: ftp: loaded support on port[0] = 21 [ 1259.962006][T30386] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1260.106522][T30389] chnl_net:caif_netlink_parms(): no params data found [ 1260.133611][T30392] chnl_net:caif_netlink_parms(): no params data found [ 1260.456976][T30389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.464203][T30389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.472239][T30389] device bridge_slave_0 entered promiscuous mode [ 1260.479687][T30389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.487006][T30389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.495130][T30389] device bridge_slave_1 entered promiscuous mode [ 1260.502013][T30392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.518351][T30392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.526303][T30392] device bridge_slave_0 entered promiscuous mode [ 1260.537371][T30392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.544541][T30392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.552455][T30392] device bridge_slave_1 entered promiscuous mode [ 1260.563711][T30393] chnl_net:caif_netlink_parms(): no params data found [ 1260.592319][T30392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.603455][T30392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.617218][T30389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.645409][T30389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.662671][T30392] team0: Port device team_slave_0 added [ 1260.680952][T30392] team0: Port device team_slave_1 added [ 1260.690998][T30393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.698026][T30393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.705931][T30393] device bridge_slave_0 entered promiscuous mode [ 1260.717172][T30389] team0: Port device team_slave_0 added [ 1260.725523][T30389] team0: Port device team_slave_1 added [ 1260.741216][T30393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.750824][T30393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.760151][T30393] device bridge_slave_1 entered promiscuous mode [ 1260.810274][T30392] device hsr_slave_0 entered promiscuous mode [ 1260.848479][T30392] device hsr_slave_1 entered promiscuous mode [ 1260.888325][T30392] debugfs: Directory 'hsr0' with parent '/' already present! [ 1260.924245][T30393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.970425][T30389] device hsr_slave_0 entered promiscuous mode [ 1261.008642][T30389] device hsr_slave_1 entered promiscuous mode [ 1261.048328][T30389] debugfs: Directory 'hsr0' with parent '/' already present! [ 1261.063957][T30393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.094476][T30393] team0: Port device team_slave_0 added [ 1261.101479][T30393] team0: Port device team_slave_1 added [ 1261.154747][T30393] device hsr_slave_0 entered promiscuous mode [ 1261.218595][T30393] device hsr_slave_1 entered promiscuous mode [ 1261.268401][T30393] debugfs: Directory 'hsr0' with parent '/' already present! [ 1261.314727][T30392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.353846][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1261.362052][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1261.376055][T30392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.387502][T30389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.399621][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1261.418737][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1261.427318][T18671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.434358][T18671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.464225][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1261.472630][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.485993][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.494880][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.501926][ T7597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.515452][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1261.524667][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1261.539126][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1261.547889][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1261.574699][T30393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.584250][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1261.592448][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1261.600939][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1261.609566][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1261.617869][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1261.626271][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1261.634034][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1261.641854][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1261.650372][T17311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1261.660697][T30389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.670373][T30392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1261.689136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1261.696923][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1261.704798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1261.713745][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1261.723041][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.730082][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.738110][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.746759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.755355][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.762390][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.770174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1261.779344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1261.790038][T30393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.814241][T30389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1261.825214][T30389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1261.839367][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1261.848596][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1261.857198][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1261.865914][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1261.874624][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1261.883328][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1261.891664][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1261.900461][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1261.908903][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1261.917196][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1261.925917][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1261.934412][T18671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.941444][T18671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.949608][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1261.957637][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1261.965454][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1261.989083][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.997750][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1262.006724][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.013760][T19184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.021808][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1262.031024][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1262.039783][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1262.047106][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1262.054716][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1262.064170][T19184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1262.077637][T30389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.093074][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1262.108940][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1262.117861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1262.127376][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1262.136068][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1262.148316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1262.158144][T30393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1262.169185][T30393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1262.179019][T30392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.197594][T30401] ================================================================== [ 1262.197823][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1262.205690][T30401] BUG: KCSAN: data-race in d_alloc_parallel / d_set_d_op [ 1262.205694][T30401] [ 1262.205707][T30401] read to 0xffff8881288b5840 of 4 bytes by task 30402 on cpu 1: [ 1262.205726][T30401] d_alloc_parallel+0x884/0xe00 [ 1262.205743][T30401] __lookup_slow+0xb4/0x2a0 [ 1262.205759][T30401] lookup_slow+0x4f/0x70 [ 1262.205775][T30401] walk_component+0x4a2/0xe70 [ 1262.205800][T30401] path_lookupat.isra.0+0x13a/0x5a0 [ 1262.214634][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1262.220573][T30401] filename_lookup+0x145/0x2b0 [ 1262.220589][T30401] user_path_at_empty+0x4c/0x70 [ 1262.220607][T30401] vfs_statx+0xd9/0x190 [ 1262.220624][T30401] __do_sys_newstat+0x51/0xb0 [ 1262.220637][T30401] __x64_sys_newstat+0x3a/0x50 [ 1262.220655][T30401] do_syscall_64+0xcc/0x370 [ 1262.220672][T30401] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1262.220675][T30401] [ 1262.220690][T30401] write to 0xffff8881288b5840 of 4 bytes by task 30401 on cpu 0: [ 1262.220703][T30401] d_set_d_op+0x17b/0x230 [ 1262.220724][T30401] simple_lookup+0xaa/0xb0 [ 1262.230382][T30393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.230671][T30401] __lookup_slow+0x129/0x2a0 [ 1262.236533][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1262.240079][T30401] lookup_slow+0x4f/0x70 [ 1262.240095][T30401] walk_component+0x4a2/0xe70 [ 1262.240119][T30401] path_lookupat.isra.0+0x13a/0x5a0 [ 1262.244526][T18671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1262.248992][T30401] filename_lookup+0x145/0x2b0 [ 1262.249008][T30401] user_path_at_empty+0x4c/0x70 [ 1262.249039][T30401] vfs_statx+0xd9/0x190 [ 1262.249064][T30401] __do_sys_newstat+0x51/0xb0 [ 1262.372481][T30401] __x64_sys_newstat+0x3a/0x50 [ 1262.377223][T30401] do_syscall_64+0xcc/0x370 [ 1262.381703][T30401] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1262.387561][T30401] [ 1262.389862][T30401] Reported by Kernel Concurrency Sanitizer on: [ 1262.395987][T30401] CPU: 0 PID: 30401 Comm: modprobe Not tainted 5.4.0-rc7+ #0 [ 1262.403320][T30401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.413347][T30401] ================================================================== [ 1262.421386][T30401] Kernel panic - not syncing: panic_on_warn set ... [ 1262.427949][T30401] CPU: 0 PID: 30401 Comm: modprobe Not tainted 5.4.0-rc7+ #0 [ 1262.435288][T30401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.445314][T30401] Call Trace: [ 1262.448583][T30401] dump_stack+0x11d/0x181 [ 1262.452895][T30401] panic+0x210/0x640 [ 1262.456773][T30401] ? vprintk_func+0x8d/0x140 [ 1262.461345][T30401] kcsan_report.cold+0xc/0xd [ 1262.465928][T30401] kcsan_setup_watchpoint+0x3fe/0x460 [ 1262.471279][T30401] __tsan_unaligned_write4+0xc4/0x100 [ 1262.476621][T30401] d_set_d_op+0x17b/0x230 [ 1262.480927][T30401] simple_lookup+0xaa/0xb0 [ 1262.485333][T30401] __lookup_slow+0x129/0x2a0 [ 1262.489920][T30401] lookup_slow+0x4f/0x70 [ 1262.494143][T30401] walk_component+0x4a2/0xe70 [ 1262.498801][T30401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1262.505030][T30401] ? link_path_walk.part.0+0x77f/0xa90 [ 1262.510472][T30401] ? page_add_file_rmap+0xf6/0x480 [ 1262.515576][T30401] path_lookupat.isra.0+0x13a/0x5a0 [ 1262.520763][T30401] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1262.526464][T30401] ? __read_once_size.constprop.0+0x12/0x20 [ 1262.532337][T30401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1262.538568][T30401] filename_lookup+0x145/0x2b0 [ 1262.543330][T30401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1262.549548][T30401] ? strncpy_from_user+0x219/0x2b0 [ 1262.554657][T30401] user_path_at_empty+0x4c/0x70 [ 1262.559487][T30401] vfs_statx+0xd9/0x190 [ 1262.563625][T30401] __do_sys_newstat+0x51/0xb0 [ 1262.568290][T30401] ? _raw_spin_unlock_irq+0x68/0x80 [ 1262.573470][T30401] ? mem_cgroup_handle_over_high+0x50/0x180 [ 1262.579341][T30401] ? __read_once_size.constprop.0+0x12/0x20 [ 1262.585213][T30401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1262.591476][T30401] ? debug_smp_processor_id+0x4c/0x172 [ 1262.596914][T30401] __x64_sys_newstat+0x3a/0x50 [ 1262.601661][T30401] do_syscall_64+0xcc/0x370 [ 1262.606145][T30401] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1262.612013][T30401] RIP: 0033:0x7fbff7cf1c65 [ 1262.616434][T30401] Code: 00 00 00 e8 5d 01 00 00 48 83 c4 18 c3 90 90 90 90 90 90 90 90 83 ff 01 48 89 f0 77 18 48 89 c7 48 89 d6 b8 04 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 17 f3 c3 90 48 8b 05 a1 51 2b 00 64 c7 00 16 [ 1262.636018][T30401] RSP: 002b:00007fffae185108 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1262.644416][T30401] RAX: ffffffffffffffda RBX: 00007fbff7fbd481 RCX: 00007fbff7cf1c65 [ 1262.652416][T30401] RDX: 00007fffae185200 RSI: 00007fffae185200 RDI: 00007fbff7fbd481 [ 1262.660374][T30401] RBP: 00007fbff81c22f0 R08: 00007fbff7fa8ef8 R09: 00007fbff7d45070 [ 1262.668334][T30401] R10: 0000000000000000 R11: 0000000000000246 R12: 00005631a7477160 [ 1262.676281][T30401] R13: 00007fffae185333 R14: 0000000000000010 R15: 00055facc785c680 [ 1262.685664][T30401] Kernel Offset: disabled [ 1262.689984][T30401] Rebooting in 86400 seconds..