[ 38.864257][ T26] audit: type=1800 audit(1556078703.207:26): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 38.903218][ T26] audit: type=1800 audit(1556078703.207:27): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 38.924234][ T26] audit: type=1800 audit(1556078703.207:28): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 39.799673][ T26] audit: type=1800 audit(1556078704.167:29): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. 2019/04/24 04:05:15 fuzzer started 2019/04/24 04:05:18 dialing manager at 10.128.0.26:46509 2019/04/24 04:05:19 syscalls: 2440 2019/04/24 04:05:19 code coverage: enabled 2019/04/24 04:05:19 comparison tracing: enabled 2019/04/24 04:05:19 extra coverage: extra coverage is not supported by the kernel 2019/04/24 04:05:19 setuid sandbox: enabled 2019/04/24 04:05:19 namespace sandbox: enabled 2019/04/24 04:05:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/24 04:05:19 fault injection: enabled 2019/04/24 04:05:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/24 04:05:19 net packet injection: enabled 2019/04/24 04:05:19 net device setup: enabled 04:08:26 executing program 0: syzkaller login: [ 241.792750][ T7878] IPVS: ftp: loaded support on port[0] = 21 04:08:26 executing program 1: [ 241.899836][ T7878] chnl_net:caif_netlink_parms(): no params data found [ 241.990567][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.006041][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.026042][ T7878] device bridge_slave_0 entered promiscuous mode [ 242.045854][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.052975][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.070389][ T7878] device bridge_slave_1 entered promiscuous mode [ 242.089131][ T7881] IPVS: ftp: loaded support on port[0] = 21 [ 242.115388][ T7878] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.139928][ T7878] bond0: Enslaving bond_slave_1 as an active interface with an up link 04:08:26 executing program 2: [ 242.188650][ T7878] team0: Port device team_slave_0 added [ 242.207980][ T7878] team0: Port device team_slave_1 added [ 242.308340][ T7878] device hsr_slave_0 entered promiscuous mode 04:08:26 executing program 3: [ 242.365327][ T7878] device hsr_slave_1 entered promiscuous mode [ 242.471485][ T7881] chnl_net:caif_netlink_parms(): no params data found [ 242.523266][ T7884] IPVS: ftp: loaded support on port[0] = 21 [ 242.571588][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.578960][ T7878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.588572][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.595698][ T7878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.613919][ T7886] IPVS: ftp: loaded support on port[0] = 21 04:08:27 executing program 4: [ 242.673082][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.682121][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.691245][ T7881] device bridge_slave_0 entered promiscuous mode [ 242.701026][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.715394][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.737844][ T7881] device bridge_slave_1 entered promiscuous mode [ 242.791854][ T7881] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.819642][ T7881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.898500][ T7889] IPVS: ftp: loaded support on port[0] = 21 [ 242.931473][ T7881] team0: Port device team_slave_0 added 04:08:27 executing program 5: [ 242.964837][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.985126][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.006229][ T7878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.032746][ T7881] team0: Port device team_slave_1 added [ 243.081714][ T7878] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.126582][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.135449][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.189894][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 243.256689][ T7881] device hsr_slave_0 entered promiscuous mode [ 243.295242][ T7881] device hsr_slave_1 entered promiscuous mode [ 243.355187][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.363841][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.372532][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.379668][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.389200][ T7886] chnl_net:caif_netlink_parms(): no params data found [ 243.418756][ T7895] IPVS: ftp: loaded support on port[0] = 21 [ 243.426806][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.436441][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.446127][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.453199][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.505286][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.534375][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.542269][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.550201][ T7886] device bridge_slave_0 entered promiscuous mode [ 243.559864][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.567122][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.574793][ T7886] device bridge_slave_1 entered promiscuous mode [ 243.602810][ T7886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.619452][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.640538][ T7886] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.666327][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.673420][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.681835][ T7884] device bridge_slave_0 entered promiscuous mode [ 243.691591][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.699064][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.707670][ T7884] device bridge_slave_1 entered promiscuous mode [ 243.721962][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.730942][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.740337][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.761448][ T7886] team0: Port device team_slave_0 added [ 243.773788][ T7886] team0: Port device team_slave_1 added [ 243.798010][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.806638][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.826684][ T7884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.871326][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.879670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.888477][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.896856][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.918187][ T7884] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.943116][ T7878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.998872][ T7886] device hsr_slave_0 entered promiscuous mode [ 244.045267][ T7886] device hsr_slave_1 entered promiscuous mode [ 244.102857][ T7884] team0: Port device team_slave_0 added [ 244.110729][ T7884] team0: Port device team_slave_1 added [ 244.120371][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 244.227819][ T7884] device hsr_slave_0 entered promiscuous mode [ 244.285464][ T7884] device hsr_slave_1 entered promiscuous mode [ 244.398453][ T7878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.410181][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.419477][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.427598][ T7889] device bridge_slave_0 entered promiscuous mode [ 244.435435][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.442528][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.450663][ T7889] device bridge_slave_1 entered promiscuous mode [ 244.479325][ T7895] chnl_net:caif_netlink_parms(): no params data found [ 244.564334][ T7889] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.575510][ T7889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 244.604434][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0 04:08:29 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xce, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 244.634734][ T7889] team0: Port device team_slave_0 added [ 244.653340][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.672378][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.682149][ T7895] device bridge_slave_0 entered promiscuous mode [ 244.693006][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.701539][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.710227][ T7895] device bridge_slave_1 entered promiscuous mode [ 244.724901][ C0] hrtimer: interrupt took 47080 ns [ 244.734410][ T7889] team0: Port device team_slave_1 added [ 244.808397][ T7889] device hsr_slave_0 entered promiscuous mode [ 244.855292][ T7889] device hsr_slave_1 entered promiscuous mode [ 244.930134][ T7895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 244.956680][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.980268][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.998603][ T7895] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 245.055035][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.062949][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.073808][ T7881] 8021q: adding VLAN 0 to HW filter on device team0 04:08:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x801) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) [ 245.115796][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.123421][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.143326][ T7902] syz-executor.0 (7902) used greatest stack depth: 22712 bytes left [ 245.175775][ T7886] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.196773][ T7895] team0: Port device team_slave_0 added [ 245.204482][ T7895] team0: Port device team_slave_1 added [ 245.211574][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.226293][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.235195][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.242275][ T7887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.257614][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.270120][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.277118][ T1174] block nbd0: Receive control failed (result -22) [ 245.281013][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.292606][ T7887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.292967][ T7905] block nbd0: shutting down sockets [ 245.305966][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.314832][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.324126][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.332554][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.343849][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.353729][ T1174] block nbd0: Receive control failed (result -22) [ 245.376520][ T7906] block nbd0: shutting down sockets [ 245.379227][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.395283][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.404076][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.413589][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 04:08:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x801) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) [ 245.425684][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.434264][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.452869][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.461589][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.468725][ T7887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.490233][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.499559][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.509097][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.516206][ T7887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.523953][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.533025][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.534793][ T1174] block nbd0: Receive control failed (result -22) [ 245.541903][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.556108][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.564516][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.572919][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:08:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xd7e9aa680e988cd3, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) r2 = dup2(r0, r0) connect$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x0, @local}}, 0x1e) [ 245.588510][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.602046][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.604848][ T7909] block nbd0: shutting down sockets [ 245.614736][ T7881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.628304][ T7881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:08:30 executing program 0: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828fd7000ffdbdf250f000000180001001400030000000000000000000000ffffe000000a0800050001010000100001000c000700043a00002e000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x2, 0xfffffe9a) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000f12000)) [ 245.698068][ T7895] device hsr_slave_0 entered promiscuous mode [ 245.735534][ T7895] device hsr_slave_1 entered promiscuous mode 04:08:30 executing program 0: socket(0x1, 0x803, 0x9) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x200) [ 245.784776][ T7886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.795530][ T7886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.807603][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.816139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.824568][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.835780][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.847670][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.865528][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.872728][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 04:08:30 executing program 0: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000100)='procmd5sumvboxnet1$/\x00', 0xffffffffffffffd2, 0x2) [ 245.881606][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.890407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.899379][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.908111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.917185][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.927026][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.969394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.981187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.991997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.004297][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.015420][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.022501][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.032809][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.042188][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.050871][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.059681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.071398][ T7881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.087819][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.096026][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.104513][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 04:08:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x101, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x1ff, 'queue1\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 246.160243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.172414][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.197535][ T7884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.218925][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.241196][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.250266][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.280667][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.292215][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.330961][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.358079][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.374158][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.398140][ T7895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.411888][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.435123][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.443875][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.453030][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.460207][ T7887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.471403][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.481394][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.489819][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.496926][ T7887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.504639][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.513005][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.521217][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.535813][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.544509][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.558703][ T7895] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.575751][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.584571][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.600039][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.627575][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.637975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 04:08:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x1b1) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @link_local, 'bridge0\x00'}}, 0x1e) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000000c0)=0x9) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 04:08:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) sendto(r1, &(0x7f0000000100)="ffdccc214c0db5daaed940b88cf89a46f068604564d85cd0d2603e6553d9b8b1e146e065da7d8d4cc1cad3b39edb819cc7994a17d539a46f493b168022818f7acb2f8a4cb169c53f1e620ef7600f7f2522dd647741300cc8a5e208bd8cdef9215f3e9d3ef2ca3da73210c6b2f03aa5300649ea31f3b8a81103c2db329552e96710de63e0b53c9ba42a556a975974b6acca4a80fcbf30959b4a16", 0x9a, 0x14, &(0x7f00000001c0)=@ethernet={0x307, @local}, 0x80) [ 246.655560][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.662658][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.675386][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.687864][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.696878][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.703963][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.725014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.742693][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.762479][ T7889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.773659][ T7889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.793976][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.802655][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.820956][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.834362][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.849308][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.860990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.874359][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.883856][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.895008][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.906917][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.914636][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.922679][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.931433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.973537][ T7895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.996628][ T7895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.009116][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.019818][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.031780][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.040434][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.049122][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.071339][ T7889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.089580][ T7895] 8021q: adding VLAN 0 to HW filter on device batadv0 04:08:31 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x581002, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, 0x0) 04:08:31 executing program 1: accept$packet(0xffffffffffffffff, &(0x7f0000001b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001bc0)=0x14) pipe2(&(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)={0x12, 0x1, 0x103, 0xffffffffffffffff, 0x22, 0xffffffffffffffff, 0x1000, [], r0, r1, 0x9, 0x6}, 0x3c) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2ef, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x8, 0xbd, 0x8000000001, 0x0, r2, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 04:08:31 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1e, &(0x7f0000000040)={@remote}, 0x20) r2 = getpid() ptrace$peekuser(0x3, r2, 0x9) setsockopt(r1, 0x7, 0x1c, &(0x7f0000000080)="f7e459ba406b82c49c837ba484c2b10337cc02d1309c88bb6fa0764f2553fed367d590d55138bdd2a8a6c729d3541df27fa8a3fa50f3a972830489396c804a738d9f6a6d0b351ae1f1167ea25054afc8726e89b41fb67090077695a4bbbe94dc502c051365d466c028", 0x69) syz_open_procfs(0x0, 0x0) fcntl$getown(r0, 0x9) 04:08:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) sendto(r1, &(0x7f0000000100)="ffdccc214c0db5daaed940b88cf89a46f068604564d85cd0d2603e6553d9b8b1e146e065da7d8d4cc1cad3b39edb819cc7994a17d539a46f493b168022818f7acb2f8a4cb169c53f1e620ef7600f7f2522dd647741300cc8a5e208bd8cdef9215f3e9d3ef2ca3da73210c6b2f03aa5300649ea31f3b8a81103c2db329552e96710de63e0b53c9ba42a556a975974b6acca4a80fcbf30959b4a16", 0x9a, 0x14, &(0x7f00000001c0)=@ethernet={0x307, @local}, 0x80) 04:08:31 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_perm_addr}) sendto(r0, &(0x7f0000000140)="22810845272292613e234064f2dfbb013b3b684d09b261f5e2adb37abc450f339b7d5bcd58dd041ecbd4443185b5f53b123fed1ec812acebcdd77afbfce1e6c7bc018720bf62769b492eaeebeae370d22696dfd4101c291271fcb5fe1bce5a37d23edc1898159cfd778ee2fb2c75e0b3f74e03cec61fa8e98b7d753bfddcf050a11845a2e88d4e20d301fa961cace8e69e6a5f50ae63d9d075d8a4cb5ccc206ea52cb415e69b27417248d26311dd50c7caac99dfd725fcf015f3ac742224b368a0916739faf626c308c2f5da8dd1d2c10f5e24b88d4c4d3d000000000000000000", 0xe1, 0xc2, 0x0, 0x0) 04:08:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x40, 0x420000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x68300) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x104e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/16, 0xfd0f}], 0x1}, 0x0) 04:08:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f0000001e40)='./file0\x00', 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x69, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) getgroups(0x6, &(0x7f0000000640)=[0xee01, 0xee00, 0xee00, 0xee00, 0xee01, 0x0]) r3 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x1, r1}], {0x4, 0x1}, [{0x8, 0x0, r2}, {0x8, 0x6, r3}], {0x10, 0x4}, {0x20, 0x4}}, 0x3c, 0x1) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffffffffffffff7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0='bpq0\x00', 0x1, [@null, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000440)=0x2) accept$unix(r0, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x90040, 0x0) sendmsg$xdp(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="3b6d130ac149f0369d894f9afcfbc82fcebbd37e5b487d66ae9ec51b612f552a40bdb6a2d442b65c6f4378854bfc24b08a237e", 0x33}], 0x1, 0x0, 0x0, 0x4000001}, 0x800) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0xffffffffffffffff) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="6f89e86e000000000000000000"], &(0x7f00000002c0)=""/123, 0x7b) utimensat(r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000340), 0x4) 04:08:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x60}}, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0xfffffffffffffdcb}}, 0x0) [ 247.355214][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 247.361606][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:08:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) sendto(r1, &(0x7f0000000100)="ffdccc214c0db5daaed940b88cf89a46f068604564d85cd0d2603e6553d9b8b1e146e065da7d8d4cc1cad3b39edb819cc7994a17d539a46f493b168022818f7acb2f8a4cb169c53f1e620ef7600f7f2522dd647741300cc8a5e208bd8cdef9215f3e9d3ef2ca3da73210c6b2f03aa5300649ea31f3b8a81103c2db329552e96710de63e0b53c9ba42a556a975974b6acca4a80fcbf30959b4a16", 0x9a, 0x14, &(0x7f00000001c0)=@ethernet={0x307, @local}, 0x80) 04:08:31 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0x7, [0xfff, 0x0, 0x4, 0xfffffffeffffffff, 0x0, 0x5, 0x80000000]}, &(0x7f0000000200)=0x16) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x5}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14}, 0x14) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000140)={0x90, 0x42, &(0x7f00000000c0)="2393f30ece160871a2580300a72a9af4034e3b6109a3b86cdc695d13118fb9ba32c3c8d0a1121b079770eff27956388330c8d31e01ad69d2fa76121efadf8bfdf73219cd6a", {0xc99, 0x1f, 0x38414262, 0x3, 0x7, 0xfffffffffffffffa, 0x7, 0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00, 0x0, 0x0, 0x0, 0x28fc]}}, 0xfef5) 04:08:31 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x802, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x7fff}, 0x10) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000001c0)={0x32, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e22, 0x1, 'sh\x00', 0xa, 0x80000000, 0x49}, 0x2c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000001340)=[{0x4, 0x0, 0x7, 0x0, @tick=0x20, {0x1, 0x8001}, {0x6d1c0273, 0x800}, @connect={{0x800, 0x5529}, {0xffff, 0x6}}}, {0x8000, 0x6, 0x0, 0x7f, @time, {0x6, 0x7}, {0x5, 0x7fff}, @connect={{0x8, 0x7f}, {0xcd44, 0x3f}}}, {0x1000, 0x0, 0x20000000000002, 0x4, @time={r1, r2+10000000}, {0x14a, 0x20}, {0xffff, 0x8000000000000}, @raw8={"e0fc46e940b13fb0efccb00d"}}, {0x3, 0x5, 0x4, 0x100000000000008, @time={r3, r4+10000000}, {0x1}, {0x6, 0xfffffffffffff801}, @queue={0x52, {0x80, 0x7}}}, {0x2, 0xffffffff, 0x8, 0x8001, @time={r5, r6+10000000}, {0x6, 0x2}, {0x9, 0x1}, @control={0x7fffffff, 0x7fff, 0x9}}], 0x15e) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') getsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:08:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x40, 0x420000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x68300) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x104e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/16, 0xfd0f}], 0x1}, 0x0) 04:08:31 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x400, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x404000, 0x0) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x39c, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 04:08:31 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af20, &(0x7f0000000000)) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9b, 0x2880) ioctl$TCSBRKP(r1, 0x5425, 0xcfec) 04:08:32 executing program 4: r0 = socket$inet(0x2, 0x80000, 0x400001c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000009ffff"], &(0x7f0000000180)=0xe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={r1, 0x948e, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @remote}}}, 0xffffffffffffffdf) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0ad401003c123f319bd070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x3, 0x0) umount2(0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10400) r4 = geteuid() getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) fchownat(r3, &(0x7f0000000340)='./file0\x00', r4, r5, 0x100) accept$inet(r0, 0x0, &(0x7f0000000040)) r6 = semget$private(0x0, 0x1, 0x20) semctl$SETVAL(r6, 0x0, 0x10, &(0x7f0000000080)=0x7) 04:08:32 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) recvmsg(r0, 0x0, 0x100) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x6) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000001640)={0x0, 0x1a000}) r1 = userfaultfd(0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 04:08:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0xfffffffffffffdcf, &(0x7f0000000080)={@random="cd390b081bf2", @dev, [{[], {0x8100, 0x4, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 04:08:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) sendto(r1, &(0x7f0000000100)="ffdccc214c0db5daaed940b88cf89a46f068604564d85cd0d2603e6553d9b8b1e146e065da7d8d4cc1cad3b39edb819cc7994a17d539a46f493b168022818f7acb2f8a4cb169c53f1e620ef7600f7f2522dd647741300cc8a5e208bd8cdef9215f3e9d3ef2ca3da73210c6b2f03aa5300649ea31f3b8a81103c2db329552e96710de63e0b53c9ba42a556a975974b6acca4a80fcbf30959b4a16", 0x9a, 0x14, &(0x7f00000001c0)=@ethernet={0x307, @local}, 0x80) 04:08:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0}, &(0x7f00000000c0)=0xfffffffffffffd98) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0xffffffffffffff9c, 0x0, [0x0, 0x0, 0x0, 0x400100], r0}, 0x391) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000080)={{}, 0x8, 0x10000}) 04:08:32 executing program 4: r0 = memfd_create(&(0x7f0000000ffd)='[,\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2012, r0, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) read(r0, &(0x7f0000000000), 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10400, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x90, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x400, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffe00}, @in6={0xa, 0x4e23, 0xffffffff, @local, 0x4}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x1}, @in6={0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x6, 0x3, 0x1, 0x6, 0x20}, 0x98) 04:08:32 executing program 1: r0 = socket$kcm(0xa, 0x20000000000802, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40c000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0x1, 0x1e, 0x40}) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x1, &(0x7f0000002580)=[{&(0x7f0000000000), 0xfdfa}], 0x10f}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @mcast2, 0xf6e3}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @empty}], 0x3c) 04:08:32 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "1c351c25f075962f70e545adfeba79d897863b97"}, 0x15, 0xfffffffffffffffb) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x2000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x6, 0xfffffffffffffffa, 0x0, 0x3, 0x80000001}, 0x14) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) fsync(0xffffffffffffffff) r3 = getuid() r4 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r6 = getegid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x3}, [{0x2, 0x4, r3}, {0x2, 0x0, r4}], {0x4, 0x4}, [{0x8, 0x4, r5}, {0x8, 0x1, r6}, {0x8, 0x5, r7}], {0x10, 0x3}, {0x20, 0x5}}, 0x4c, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r8) 04:08:32 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x7e, @loopback, 0x4e23, 0x1, 'sh\x00', 0x3, 0x7, 0x5}, 0x2c) prctl$PR_SET_PTRACER(0x59616d61, r0) 04:08:32 executing program 5: socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ce939ada2d0823594b1824ebba8d707a5dd682078e443f8d670ac32c7e6c98ce44ca70a4ddbfe8f748f6b128dda5dae2989444073278f6da9424bb945c40bb"}, 0x60) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 04:08:32 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 04:08:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7f, &(0x7f0000000080)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x2, 0x1, 0xb0}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x31, r1, 0x0) 04:08:32 executing program 2: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40000000000600b, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f00000001c0)="6286edc01f02f0d935805d83bf87e61dc8c1dc792eb56d79caa27a8b349c681f94e2173913fda593c88d46a5d05c1a4fe415f6a355c3a70ac0bb7e8ed5326d4b2346a830c19646173a02564768906f05cb838ba399af5b789e6de6a753366a471870ff910970e3a18e661c8a9c6163437f7675f561e760dfbe177088a6ce68b838ad079f546784309534c5868ea2b42dc585ecc4a6ebfe23f6edda9770da64562a482bd32393b85dfa5c561e4e82ac3a6a489725e4ee81a5fccbffca0b85244d069202f6dca893ef62", &(0x7f0000000340)=""/121}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000040)=0x9) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x5, r4}], {0x4, 0x1}, [{0x8, 0x5, r5}], {0x10, 0x4}, {0x20, 0x5}}, 0x3c, 0x1) clone(0xa100009ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000003c0)) r6 = getuid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000400)='./file0\x00', r6, r7) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='hfsplus\x00', 0x0, 0x0) 04:08:32 executing program 3: setresgid(0x0, 0xee00, 0x0) setuid(0xee01) r0 = getegid() setresgid(0x0, 0x0, r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x4}, 0x1}}, 0x18) setgid(r0) 04:08:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:32 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x800000000008032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) recvfrom$netrom(r1, &(0x7f0000000280)=""/246, 0xf6, 0x1, &(0x7f0000000380)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x7, 0x1ff, 0x6, 0x0, 0x19b, "0e46954135408d34de53a87eb2f94fd4d1d171", 0x84, 0x800}) getpeername$packet(0xffffffffffffff9c, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001400)=0x14) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000001580)={&(0x7f0000001440)={0x1d, r2}, 0x10, &(0x7f0000001540)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="04000020010000000200004008030000962eb556c904001d"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 04:08:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) setsockopt$ax25_int(r1, 0x101, 0xf, &(0x7f0000000080), 0x4) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup2(r2, r3) getsockopt$rose(r4, 0x104, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x81b2593d0d5bc512, 'nr0\x00\x00\x00\x00\x00\x01\x00', 0x4}, 0x18) 04:08:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021500000700000000000000000000000500070000a000000a000000000000000e00000000000100"/56], 0x38}}, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1) 04:08:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/urandom\x00', r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x3, 0x7f, 0x0, 0x9}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000500)={r3, 0x1ff}, &(0x7f0000000540)=0x8) keyctl$update(0x2, r2, &(0x7f0000000180)="21774a3015ae7b3ae644debf77045d9a3094700e9ff5e3cc971994408dbdb9331cbcda811f371fc85dd3ff83005b43f2f96cb232e65517f728420dc1ec7c1b20ed9575112032066a48aa5145fec2c184c4448c94144e6bd2764261649978928fbbb831847a012fddcaf1dd72e415b40c9b7a0f139891b1806db552d735c7b687c2821c19584311b393f555875106230d7ce66524bc1cccb553a90650022c6c6890", 0xa1) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x80442) accept$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0) sendto$packet(r4, &(0x7f0000000240)="877bec37e1dc76c91977f20b7ae8868a87de2d433ea26d983ae4d30dc5612c5ddb0a", 0x22, 0x1, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x7f}, 0x14) write$P9_RAUTH(r4, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x60, 0x4, 0x6}}, 0x14) [ 248.473324][ T8079] QAT: Invalid ioctl 04:08:32 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TCXONC(r0, 0x540a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x1) pipe2$9p(&(0x7f0000000000), 0x800) ioctl$int_in(r1, 0x80000040045010, &(0x7f00000000c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000140)) [ 248.511616][ T8079] QAT: Invalid ioctl 04:08:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffd0f, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x13, 0x509, 0x0, 0x0, {0x7}}, 0x18}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) [ 248.545023][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 248.550923][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:08:33 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x800, 0x0) bind(r0, &(0x7f00000001c0)=@rc={0x1f, {0x1, 0x6, 0x7538c418, 0x3cc, 0x1, 0x4}, 0x1}, 0xffffff9d) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) request_key(0x0, &(0x7f0000000240)={'syz'}, 0x0, 0xfffffffffffffffd) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="e224efc6f0bc9dda3de60c", 0xb) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xa00, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x4400}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0xf6e) sync_file_range(r1, 0x7, 0x8, 0x4) 04:08:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:33 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)) 04:08:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='vxcan1\x00', 0x10) r1 = dup2(r0, r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x2, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1}}, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 04:08:33 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x100000, 0x0) setxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v1={0x1000000, [{0x200, 0x1000000000000}]}, 0xc, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x87f4e0f1706317f1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xf3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) connect$l2tp(0xffffffffffffffff, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x0, 0x1, 0x3, 0x3}}, 0x26) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0xfffffffffffffce7) r4 = semget$private(0x0, 0x6, 0x4c) semctl$SEM_INFO(r4, 0x4, 0x13, &(0x7f0000000440)=""/188) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000740)={0xb, 0x10, 0xfa00, {&(0x7f0000000600), r5, 0x40}}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x62ff3a872c5070bc, &(0x7f0000000000)=""/7, &(0x7f00000001c0)=0x7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x2000}, 0x4) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000500)={{0x0, @name="27e00f13a14607edcb081c63d677fed91c9e1d8655f9ff28642776b7222d73f2"}, "84d02c0932375a5221919a23de96c6b3419bae4c5ad185642c333ba396869763", 0xfffffffffffffffd}) r6 = semget$private(0x0, 0x3, 0x4) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f0000000080)=""/124) socketpair(0x800000000000001e, 0x5, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 04:08:33 executing program 4: unshare(0x600) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) uname(0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x5, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xf, 0x0, 0x2, {0x0, 0x20, 0x0, 0xffff}}) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000080)=0x52) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xcd8, 0x200000) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x8, 0x6, 0x2021, 0x7, 0x7, 0x6, 0x2, 0x6}}) 04:08:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, 0x0) getpid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000300)=r2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setsig(r1, 0xa, 0x13) r4 = dup2(0xffffffffffffffff, r0) getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f000000e000/0x8000)=nil) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10000000000, 0x0, @perf_config_ext}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000002980)=[{{&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x8c851f54a9ef6b06}, 0x80, &(0x7f0000001880)}}], 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000040)) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000340)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 04:08:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f0000000200)={0x7}, 0x7) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xffffffffcba9a087) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYRES32], 0x4) sync_file_range(r0, 0x0, 0x0, 0x2) fallocate(r1, 0x0, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(r1, &(0x7f00000002c0)={0x1f, {0x2, 0x81, 0x6, 0x0, 0x8e7, 0x7}}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) fallocate(r0, 0x0, 0x0, 0x110001) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000001, 0x6}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 04:08:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffd, @rand_addr, 0xe6f}, 0x1c) fchdir(0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x0) lseek(r2, 0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x10000000b, &(0x7f0000000280)=0x2, 0x10f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x5, 0x48, 0x2, 0x971b}) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x2d) ioctl$TIOCNXCL(r1, 0x540d) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) pread64(r3, 0x0, 0xfffffff8, 0x2) getresuid(0x0, 0x0, 0x0) io_setup(0x0, 0x0) perf_event_open(0x0, r5, 0x80000000, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x7fff) memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x4) sendfile(r1, r4, 0x0, 0x8000fffffffe) 04:08:33 executing program 4: unshare(0x600) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) uname(0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x5, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xf, 0x0, 0x2, {0x0, 0x20, 0x0, 0xffff}}) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000080)=0x52) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xcd8, 0x200000) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x8, 0x6, 0x2021, 0x7, 0x7, 0x6, 0x2, 0x6}}) [ 249.263890][ T8133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:08:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:33 executing program 5: socket$inet6(0xa, 0x3, 0xffff) r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) write(r0, &(0x7f0000000100)="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", 0xfc) [ 249.504979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 249.510813][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:08:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x100001, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x9, 0x0, 0x4ffff}]}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000fe8000/0x3000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x740000) syz_init_net_socket$ax25(0x3, 0x7, 0xcd) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r1, &(0x7f00000000c0)=[{{r2, r3/1000+30000}, 0x15, 0x16, 0x7}, {{}, 0x4, 0xffff000000000000, 0x3}, {{}, 0x17, 0x329, 0x7fffffff}, {{0x0, 0x2710}, 0x15, 0x0, 0x9434}, {{r4, r5/1000+10000}, 0x11, 0x7fff, 0x5}, {{0x77359400}, 0x1f, 0x4, 0xf1}, {{}, 0x17, 0x7, 0x80000000}, {{0x77359400}, 0x17, 0x80, 0x4}, {{}, 0x1f, 0x400, 0x2}], 0xd8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000300)) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x964e, 0x8, 0x0, 0x6, 0x0, 0x20004000, 0x84200, 0xf, 0x10000, 0x10000, 0x4, 0x1, 0x6, 0x8001, 0xad2, 0x80000000, 0x3f, 0x3, 0x4, 0x8000, 0x4, 0x2, 0x8, 0x8, 0xff3, 0x2, 0xfff, 0x9, 0x0, 0x3acc, 0x6e2, 0x4000000000000000, 0x1, 0x0, 0x5, 0xfeda, 0x0, 0x7fff, 0x4, @perf_config_ext={0x101}, 0x5430, 0x1, 0x101, 0x0, 0xb16d, 0xfa6, 0x6}, r6, 0xffffffffffffffff, r0, 0x1) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x20) 04:08:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:34 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffd, @rand_addr, 0xe6f}, 0x1c) fchdir(0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x0) lseek(r2, 0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x10000000b, &(0x7f0000000280)=0x2, 0x10f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x5, 0x48, 0x2, 0x971b}) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x2d) ioctl$TIOCNXCL(r1, 0x540d) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) pread64(r3, 0x0, 0xfffffff8, 0x2) getresuid(0x0, 0x0, 0x0) io_setup(0x0, 0x0) perf_event_open(0x0, r5, 0x80000000, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x7fff) memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x4) sendfile(r1, r4, 0x0, 0x8000fffffffe) 04:08:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") syz_emit_ethernet(0xffffffffffffff43, &(0x7f0000000340)={@local, @broadcast, [], {@ipv4={0x800, {{0x22, 0x4, 0x5, 0x1, 0xc7, 0x64, 0xd60, 0x4, 0x21, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, {[@cipso={0x86, 0x12, 0xffffffffffffff84, [{0x7, 0xc, "1fe5f9db3574529870b7"}]}, @lsrr={0x83, 0x17, 0x3, [@multicast2, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ssrr={0x89, 0x27, 0xd7, [@rand_addr=0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @multicast1, @rand_addr=0x89, @loopback, @loopback, @rand_addr]}, @timestamp={0x44, 0xc, 0x7, 0x0, 0x15e7, [{[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x5}]}, @timestamp={0x44, 0x18, 0x9, 0x1, 0x4, [{[], 0x2}, {[], 0x8}, {[@broadcast], 0x50b2}, {[], 0x8}]}]}}, @dccp={{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x7f, "51bde6", 0x3, "ef8f80"}, "8cceda5f1539653ea1b6701dc4190561b68561ff7febc0f3cd22cb9dcf2ee02e9294762c748f07c53161f65278d3b6"}}}}}, 0x0) 04:08:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000801, 0x0) syz_open_dev$loop(0x0, 0x1ff, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) close(r0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x9, 0x22000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f00000000c0)=0x3ff) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) 04:08:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:34 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffd, @rand_addr, 0xe6f}, 0x1c) fchdir(0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x0) lseek(r2, 0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x10000000b, &(0x7f0000000280)=0x2, 0x10f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x5, 0x48, 0x2, 0x971b}) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x2d) ioctl$TIOCNXCL(r1, 0x540d) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) pread64(r3, 0x0, 0xfffffff8, 0x2) getresuid(0x0, 0x0, 0x0) io_setup(0x0, 0x0) perf_event_open(0x0, r5, 0x80000000, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x7fff) memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x4) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 250.843116][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 250.843131][ T26] audit: type=1800 audit(1556078915.207:31): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16528 res=0 [ 251.718725][ T8146] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:36 executing program 4: unshare(0x600) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) uname(0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x5, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xf, 0x0, 0x2, {0x0, 0x20, 0x0, 0xffff}}) semctl$SETVAL(0x0, 0x3, 0x10, &(0x7f0000000080)=0x52) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xcd8, 0x200000) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x8, 0x6, 0x2021, 0x7, 0x7, 0x6, 0x2, 0x6}}) 04:08:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000801, 0x0) syz_open_dev$loop(0x0, 0x1ff, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) close(r0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x9, 0x22000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f00000000c0)=0x3ff) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) 04:08:36 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffffffffffd, @rand_addr, 0xe6f}, 0x1c) fchdir(0xffffffffffffffff) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x0) lseek(r2, 0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x10000000b, &(0x7f0000000280)=0x2, 0x10f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)={0x5, 0x48, 0x2, 0x971b}) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x2d) ioctl$TIOCNXCL(r1, 0x540d) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) pread64(r3, 0x0, 0xfffffff8, 0x2) getresuid(0x0, 0x0, 0x0) io_setup(0x0, 0x0) perf_event_open(0x0, r5, 0x80000000, 0xffffffffffffffff, 0x0) ftruncate(r4, 0x7fff) memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdda\xac\x00', 0x4) sendfile(r1, r4, 0x0, 0x8000fffffffe) 04:08:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e0000001d008183ad5de087185082cf0124b0eba0070060002339a00576f9835b3f00009148700000f85ac47c45", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000100)=""/209) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 04:08:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sched_getparam(r2, &(0x7f00000000c0)) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c4"], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 251.887724][ T8199] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 04:08:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0xa6, 0x0, [0x3]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40, 0x0) [ 252.031412][ T8213] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:08:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:36 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f6, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='sit0\x00', 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1c, &(0x7f0000000300)="91ad89501d5b527212f098d676cd7728ce2386a127e083a5e3c26151853e8d7fb6d5dae9f6ab6da32d061d75a2063f91ee4c33c41d617afd9f7f0fd22f0705d6dfca0b2885605c0700bc72058c29d351ab5a43a7008d345a9e5541e0b5a04e80d29deb674ceb244cf327af2dc496a16b39e9be88640629b9af87a28c1d5521cd4efd8a64e05bdda4e1c2ddf70e4d9c354c7cde72e166a13d4c661b2d57d54371fc5fffbb3b2b6384c1aaad315e56f0249df63cdafb282f168d59ef18e98a6d255905b300ad8518ea02ea5a109f8824ba4777bc2c6d8539c73f65818c821b68be37", 0xe1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) 04:08:36 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000001c0)=[@release={0x400c630e}], 0x30d, 0x0, 0x0}) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 04:08:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0xfffffffffffffe84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r1, 0x0) listen(r0, 0x0) [ 252.305521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 252.312136][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:08:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) getpriority(0x3, r1) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020f0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000300ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) 04:08:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:36 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x0, 0x3, @start={0x8}}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x8000000000006) r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x5, 0x200) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000000)={0xff, 0x2, 0x20, 0x0, 0x6, 0x8}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000300)) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) shutdown(r2, 0x1) ioprio_set$pid(0x3, 0x0, 0x0) 04:08:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xc074510c, 0x715000) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) [ 252.673654][ T8255] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 04:08:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x4, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="cf"]}, @typed={0x34, 0x3, @str='keyringeth0vmnet1cgroupppp1[eth0vboxnet1user\x00'}]}, 0x50}}, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a80)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000070000000400000098040000000000004001000080020000b0030000b0030000b003000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4e8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="38020000", @ANYRES16=r2, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x800}, 0x10) 04:08:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x200000000003, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000e0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4900124017dc0028bdb7df9e478b1cd5d5cad2eb9700008ef1c9870b5c85c38b202703eb3537e22200849a815fad98abf21ae174755c1d428316b26df4d3cd508e6258cd5fb635b87875b5ed519966180ce4e4e9ee4449bf3e9f4c9d1fa7d64febed0472bbf9109be777d78bee51d68b3e86cb35c4416c033d577627c92798ba8b682ece38a7be70d64c10959cc79d82474a2ed54b032594fdc54edb35fe", @ANYRES16=r3, @ANYBLOB="000826bd7000fedbdf2504000000080006000000000008000500010000001400010000000000000000000000ffffac1e0001080006000500000008000300ff0f0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 04:08:37 executing program 1: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6009, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40001, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x218, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:08:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 04:08:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x48) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000000000002004e23e0000001000000002e09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e2100"/272], 0x110) eventfd2(0x101, 0x0) [ 252.795651][ T8225] syz-executor.5 (8225) used greatest stack depth: 21832 bytes left [ 252.832505][ T8273] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 04:08:37 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f6, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='sit0\x00', 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1c, &(0x7f0000000300)="91ad89501d5b527212f098d676cd7728ce2386a127e083a5e3c26151853e8d7fb6d5dae9f6ab6da32d061d75a2063f91ee4c33c41d617afd9f7f0fd22f0705d6dfca0b2885605c0700bc72058c29d351ab5a43a7008d345a9e5541e0b5a04e80d29deb674ceb244cf327af2dc496a16b39e9be88640629b9af87a28c1d5521cd4efd8a64e05bdda4e1c2ddf70e4d9c354c7cde72e166a13d4c661b2d57d54371fc5fffbb3b2b6384c1aaad315e56f0249df63cdafb282f168d59ef18e98a6d255905b300ad8518ea02ea5a109f8824ba4777bc2c6d8539c73f65818c821b68be37", 0xe1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000002) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 252.865001][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 252.870849][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 252.879742][ T8273] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 04:08:37 executing program 4: clone(0x2102005ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') r1 = getgid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000100)=[r1, r2]) exit(0x0) read$FUSE(r0, 0x0, 0xfffffffffffffe21) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000)) 04:08:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y1uoG\x18\xd4\xc8*R6\x84\xfb\xfbU0xffffffffffffffff, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x82400, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = accept4$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x800) r5 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x5, 0x80000) poll(&(0x7f0000000300)=[{r0, 0x48}, {r1, 0x2000}, {r2, 0x32a2}, {r3, 0x22}, {r4, 0x2000}, {r5, 0x4000}], 0x6, 0xf083) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x80000) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) unlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 04:08:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)='\tw'}, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x30, 0x0, [0x67, 0xff, 0x6, 0x3, 0x3, 0x5c, 0xffff, 0x7fcd, 0x400, 0xd6c, 0x0, 0x5, 0x5, 0x842, 0xffffffff]}], r2, 0x1, 0x1, 0x48}}, 0x20) 04:08:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x400000009, 0x3, 0xcc, 0x9}, 0x3c) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x98200, 0x0) getsockname$llc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000040)={0x1000, 0x952, 0x1, 0x6, 0x5}) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000180)={r2, &(0x7f0000000040), 0x0}, 0x18) 04:08:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 04:08:37 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@local, r3}, 0x14) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x6, "4fb529e87e17831aa28eb5adbf6de19027f441998dfb367b8d1c6a94c370b283", 0x7, 0x400, 0xfffffffffffffff7, 0x1, 0x2, 0x0, 0x100, 0x1}) r4 = getpgrp(0x0) r5 = getpid() syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x6, 0x7, &(0x7f0000000740)=[{&(0x7f0000000300)="4922ecebef65f3724e5232127a143cd63623febdbd1f090b61901848d1c39477fce01abc67418b992a39ade5a46310e81066c2f94ae6e639a3128258552d60492d45e7aff78477a4c88cde5676a2b61a32de9ac13fcd4184f5acb76c9f117879063018", 0x63, 0x7}, {&(0x7f0000000380)="ec84bb8cb1577ee1b4a59626fc3fa993583db81bf2a41c471b4484c233199e8da00415221d4a2e676f471e70cea0fc2d923a17efa5a4c02bf9849c122f017127b5dde4168f02973b4d7705bbe007f0db05e96fc1d2d75bf1004dbb956bfb80a317965d31e39581382382e54d04d87d99a70f7cb4126ef9405f6d2977e65b9312a7ddc054e04294c5b1875326", 0x8c, 0x6}, {&(0x7f0000000440)="24063b12ad99de08f7a8eb7bd96562dfc1fb9dae6e0c7ae19a0b7afa88c5a9a766c15ab331d56bb1dd804706cecb3ad45a9130b847ed472e7213ddfbc02f0e72428c1404e3062b6405de9ffa6eaeedb5364fd1c010bcfb82b03457608f0d66f0f3809d0d1cda64406a47666a2a2bf3abbb5fe49c1d8fdbe05f62d5303ba1b07cb68be92a64597746f327a05d1265f826a273de73faf00ba2aaa3ef65dafdcf90a440f670325025aca33dbda08a2e5c28742000f2db9a9beb423396652b72a47d6062dfb8c124cb8e88d582", 0xcb, 0x6}, {&(0x7f0000000540)="facb9d8a8d49f211f818ea37da060fb458eae7e11ff46907ae540543a2e05324af05250f12e6f530969cbb096bd35dd30eab26e07e231257c751cf9724d8cc310c4e5bf77350f3dc638b3aaba8f49eb7f4", 0x51, 0x8}, {&(0x7f00000005c0)="67cb92ddb0957da67651f28b14aa4e00bca2d3fa", 0x14, 0x6}, {&(0x7f0000000600)="c5c86ef310da9b5ab01e158c922902736e", 0x11, 0x1}, {&(0x7f0000000640)="8dbf8a559998f3acfcab60762382a993a1887a2dcab6c00bd998844976a8f68373fcb740335bc4b7d9f71c6bf98c0ede2046138c9e9c4fed5da35d2c2ccbb3df6aba2586eca0235ba9e790194f6b7b4431747146bf72d40af390f3ee28326a57f7cd6ea1ed27300bc8f4d40a6d4e2351b02d302eb7e0c16c66bbf28bc87e16efe441e049f56e41e7e20f4f7c0caf86b8ef4dfc245ae3bf5a2e008fc30a04dce7405a9186f7e4daffa9ab2515f6a1bd5298ee8163606b49f99ee539041948a357b807e5aba38dfd4ea8b308bbef5d06a2d109dad733392c5fe704e24226920173a25a64a7eb9fb6b160b58b90aa93cf49b1bbd732bc01", 0xf6, 0x3}], 0x80, &(0x7f0000000800)='eth0trusted:\x00') kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, r0, &(0x7f0000000000)={r1, r0}) 04:08:37 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0xfffffffffffffff8, 0x5, 0xff, 0xff, 0x8, 0x2, 0x5}) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) pkey_mprotect(&(0x7f0000014000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) write$vhci(r1, &(0x7f0000000080), 0x20000081) 04:08:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="230000001a0081aee4050c00000f00fe0a8bc36f16000002000000bfd77ea14af3a311", 0x23}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x14) r2 = socket(0x15, 0xf, 0x2) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f00000002c0)="20845fb2e33c49668cd26827886ba7a89240b6152f2ce71b66106730ba9af511b6b466b5640d6a03f9d2758691116082eedd0c109ac742dc553fd6d15358398728b057e56784358e5b3efccd8dc4a5321db23799a5e458fb1aa7877c1acb67c9e73ec986b98c6f694cec30a4bc3c039a60d3f0115be82134d1d08656566ff69e15f545985d8eddf6f6fc562d22fa270077d799dce5ecbf27020784995ede06fe773f9d6f1908c3c05e3dfea9b5dd296abecb8714e3e75a312400dfa4729df18d705ce12bf5bdf91420271e34b4f3df5fbcb11f65de4250a67f36d67adb2238230a4ede13582ec3c650f27b18bb7fb088fc5827d52935829153f278a75e8ba877cd94724393177aadae5609c7c5cda2c329e8d0df84d67a6f5d1a9a397cf6bc0f52c801d54d7615289daceccc61cfefd8e8a943823c6632699ab32d1fa1ebd0ddceac1da7d998c55014bd25724e0a6f05eaa0a710769a7d3a55f3e9d056788dbb8182172bf22c10019850bb4b66d3795e6f3aa4c2c165f87dad62078e43443e1eaeb3984e57e7051b118ba7fd85bb3deac44c0419b4cd0696dd490f28422967f56d0cb6dc706de76e913d857029096ac4e215295a58e6430124928d556a7112b83a7569575776ce896fd795971292ae491d93b745dd499d6bbb9bcc0ab42c1b83d5a78f006fcbb9f6c1317bb7697cce246fd89604d86404034d1915cb947861b099b97bedd8c77c8290e4317766e6da1d1aaca6055b5ef6a5369feeed7ebb9214613e7e53f43754a1ba0cb1133ef19616ed6616218434bb5afe1f9247ac317bdf40534121e113d547d5842821022eccaacdd2435ae8b8e7257c9cbae9b0814c908949538b4dc000090cbe1b723bfd2120fb38974758d9487712008175e65be42f13d6ef08d02c69f14f23e898a0a4c62cfbbac333159ac45b5be75cfb56be42659a1b316b9ee95b62d5d9169dede85b84a8a4a55bc1c969011518ba9f3c90d25203ab9ce3e7c8508fed543749916e0b728c2b87c44078aba059f62eeb060930c43f622b14d3bb40936712c8ef05db2d925b6f8374ec2ff2bbfe46cbda966f7a46640c47af0d9b2563404bc2caa9bee21f7c21cd5fd533f8a1836f88a41557734b79fbd89cc3547316cc54d3a2e15d1a4ec580a45d9545ddd3d890868d357714a065cb7a6f4f48fa0b4c79374ec65cba783768296b5664a429394d2c87acaaa69a3e4015d6716366967b866380b7534475785a29d862c7305d24a7f89769f80d74e9fd0de5bd6d02e524ffcce344d534cdd857592c6f039503a47c438a84708195d918619cccdaead818805aaa05c5c42d06422ca8061c24b156bfa96d167ba3dd06bfd09887d1cb0252d1642072b5ee418ca76e5e49e045fdf2f5e37a8dd08cb9262479dfac4694bc2b01f3b3a643f3f510437ce0e1d9521ddc773b0b186cd09b9f114cf4e2d49d83f983b7f4e300345c5b8e66a096509d49f6cda02d3cbc771d95e67825d5a4bc687818079b36c3a190de3041b6e661c02fb1995f87cffce0f0f6558113284f3b9f055448f009039c8478fbd052d3544c48256145ccc6270d5331b3560132d2e6340d6bc4936d87c7c046e546713567089d366a74e13b4968a6b4f7ae1e0fb669ea6ad6ba3789ff0ffadbff1e921978c70004b6467814c0b475211a783a3f454a6b88cd9d45b9511b4f681c734955b3ff6774d36a0b2c51564e7759ce7969072530707131e56a379b9f159e072872cf49dd02d3464a7c57e402187cb03e8ab2d19521da8e831f54fc8873e9588e7a70a1efa487fc4a72e9a98d1042af1bc93d3c27f6f31428f374f1783f446d0dbd4cd5b39cb323f384b5533808f7714e68e6e08b9e2d17329b472e03481dabb99d8044165ea7040da46787e0f30a44147126f428427a886463fd8f3c607aca6d421a0a3ae5d12ede6084490091c0abddeef8b88c93e72cef8ba9478a74ff122b342a746aa4950fdaebe1d341bc1f820ac6a87ed5f2090d553e56982e2758544463ec8a417bf163efae9ea074c6566e6eda1484147a3c050dd5ce38ecdd4a85ce9ee36e84b8b5544af060eb5a8f7ef3e4adbc4a7bedd753225f71c7cfa9a032304199654ad868089add77ac859c2284c49574b56ddcceb68b20b124bd5a71a8204120b57611646512f4a0ead5a1d48624696448ba70fe32010f3717afd03deab537edef92e6a0602aa49751f83810ddf4df884e288400d396a973f7dfe07655ba2eaee3d28082a8a50227005427c2fc57ff323c6f17525aab51975c972370ea26eec443d1a07d86a1d133982e4dac6eac41df9e03bd9cc511df94e1a58ff860412e8c42ae5a341569ab02c6dd70ed24e8cff192ed83ab30469d8d72b171fdd5686b86d72f6f5191dc521f468e83a86b7c939f8b8f96c3e16df34b22197097a942c3265ca976bf09cb35e2216a9f344bb7a185187cef7d49c1d2b820323fd6ef284cb55980e561b98e6bc7177cc657bf41e6aa84cf20929f9199ec728784bbb49d3d5c74b9242347cb4cd52645d8d2abe7668c8b3e44afaa1e640ff052f2141edcd869ccbc8dda0a5e5366858e099eb653bc5d1e60031885cb623f3667963f384fc4296650fccb4b50ed8e760f5c91b5e06d004305ad0e05c7faffaf733e805176c7a122e0f7149ccd95fa256ddad28bb4642aeb3ac4b5a67916c2acd873baba2cf817933ab7e1904ac732cde99d0046c9270e17e1db7266b0b0da050ffa1ba6c2681307f19488b9d5ad256d65bcb612478e5faf19a9f8b6f4d9e15ba6084e16ae979dd97160c4a141f13d4cb3d91b75973a7bb3ef91a3af94747c6d9669b26080e216efbc11ff5735a3a5f9dd51c2e0b5d0ca8b4b8af2b7f7e404f63fd41a9b232e71ecffc083824e2f3a6139def3298fb1c271eef629301d9984c1048f5da14acbd51043f398f99a7e4f697fd1e6f8cb9822e5b994e1fc69d01b352e2f3bcef8ed21a7f6c80cb263420fc4d3891a04cec37996431fb3576b01114cd08005b1f700227655691221fa68e4d55048c5a4badb105c92df2915ac04ada9f5aac488c3a254bdd2da25e04a1168bae4e850af99b54640173a8b7739bebe12ad60f3bb74780be09763841769d8b02f2dd1f773a6f5a5831f43ef330a6c09bd91d6a7dc000cd2314f962f998827720fa95377fa588e36a1970e26d681d6d3e2dbab3a5ca3247d290e23a60c5a963b59de838e9a2f71750373674245f5c215576bdb272a4b3ca8f9fa9d1bcf09162b937ae740972ec2ba0082c2a1f175995253d1d08736edb50d6be7aefff46500bbee6138db1543cfe35100c13d5acb529f82a956c10e4481f2a3cb1b4d6f6831e797fb86ef7cb5a271f0c789689e4c4fb597498e3db8412a3733ba66677ea341275724a32cec18848b61bb041431850a5837c76467a27c24a8cde96de98869128a3bb39361184420c1b4c1ea60f0428948cf512420a074c21b973ce386db64c834ce6f3e16d32974bb108ea6694b116887246ead226e3b4717867b33e0bcc90591769763625c412bf80cf5043da9b04ad34a83640da3f36f217059789e709db4a3bc80dcf10484b23b5e05808a56bc359c4a54fa29500343796697fb2117f31b2f7b1321ed6fb9abebc2a3f25410a9ea72d29cc8fdee2fcc9b2b614664e3e3b2e5052dec451f716869fdfd8a5d9469e26d515813985bf85abf9f63001872fd714b7dd46b3677df0e0d3d2ebed245546c28266c162212ab268f70b14b0bb6ce87b0ee753db8cc69039c2529e496841728022ce7824576b8ed95cf5454feaeb0d473d808ad5d333b9f096261ca6953588447b86bee62590566c8b87dcd9dc333514e1b586c28ee63ed595eb7ef3af1dd7614054e74f00ed34ceb117aa0c763b3f53ed86c3452dd494ba3aa65a5498cc176af87215cec25fe95e8cae71ae487bb1805b832d313a7583ab039abe4efd82f5cc7511d7398657c8f93d3c18997f42e6d64ca1b4b6dd046a8c799aa872f2b84fcd8c051bbfeee7c8bdc3b58d38cdc381bfa1b2513c3557c656e3239871de6b9b695c0b06849e943ee927721a496b82aa43b4bd4e6adc8cd6d5d3307a6460e3413c8b758fc9682b3870807db4a8ddc5b7f00a20eacae51d465271133523c805020da81befc73a582776f83d329d8fc84d2176464c29889469b3e969091aeca004f571d2ec9bca1b52d43d47dae3ad184401c433f5a6a18fc76568f41e56cea12e8e898aa96246a199b2114c51e6ede3204ce38a87b6109925fada6158ed14c6d0b2d063dd4d6ce01f2188d174f2db29f4bb2621b82743046bf4aa9b5480b271104e756dd5374876a74d1ec1c31c054a0632a36903346c1da38a0217a2ad5a85db691d3783eb9a8175d2e42cd8a43f83116737024b3173f197498d23f957d3c270c667d7f33b7b6c59dd6c7aad8f8ba9a5d73159da26cce9c7f4c98f8abfb53edc7ee9045fe37b10c47d4f52e29bd3929638edcd8466c4f2e9f49abfa2f5a37c6cd529c6b0c9ade1d6f908858983520333626086e041be50eec756c0e31bd41def2246f77fd1e90e3063ba296a904ac3b4ccd2b8965409bb0c26b719250f48e3eac678859616c163f8be707db4d9c3a71c3d65ed662638e6db5c04bf85ba385063531b5baeef119f6272e02fa143d8221e1e436b49a07116e0b54795880a28637e7041d507ddc7a960e78c777530c3e795f1f40c30542d775c4d289dc57239dcbb46879ab81411a0dc5491ac2418e889e9b8ffe07ca1b03f3bb0794e71617056fe09d95cd10d916d5013f80ed241d38552cc4985193db0ff175d781ac9ab0271762ae90883507e85d2f520e218fa02ac052920adbb2cf7d59d3e17e7c5d5442360224e097d634e8da0adaa27f870c9253c0e977b02e6217448ca2ca10757eefd7c8f7d671b8ee5fd3a1639611a4e9e8e6193df95625c6ecfd40394348ddb738c0030326271fe8f423b8ca46bb202c4f0e3f4f763408b2417b679c1a5a18ceed5b4c45955a4a08e606dd399474d15728581d999578527737b535bdbf94a9de3ed278fe12ff703cbc3fb1e0d228925227c7532a4378bb96d9f1ed9ebaade33d1e2661f8c9d7e86f5b7296d898a74a3555a199ed11f40c8ad479ba6b5ea9948efc94cca1ccd2dd991df50c491ee415c9b7502143b81841411fd61faaf4c8f84b2e3c3d83a1ebc51b4584c362f3b36cef518a41983ec4cff6e120fd50cd39f638fde051260a49955be7db8815ae09c0568658aa734993af154d5c73dd1a38fcc4339eb93e68ab67e528b51a544da20830184c4add9479de868ade20395b420cf7d7b0d5aa83f88dd6d234d135676c0616e19c4ee0dc6c936e16946d64c4761558f31d60dbba82cfe6d0b00ceff5b2903801238154b49a762f16d27b4a47c63113361a7d8d119396e35a3df1d8546898561a8a9fa38778400cec7eaa2273221c2191d42fdb84a5e4d1d664d8f579074a1eaee2fdc0cf2c3a76dd1133e2d1f44ad03c8bd24fa8ffe52681fca8bc6673e616afdd78025567daef07284985a19f879c019e553f9336f4bcd82e4ee72147d436c48e5c7d46a72e9d9009574c3f4bd609ba06f3ba44bf06e903a76a18130ec77fd798704f2dd465984fa2e31dfdc521c5c566f53f405a6dc5eb4f9bf3ca3e5535196063518ffc8677d69d8c9c00e7532f477afbdb66c981c6e4ba312e5bebe236b82a42e08636c70b30a51550b2c5c1484de4c02e77b2a07c49216f10e34c82a8abb407d88be8e4e72a5d53d6ff6a317f0fc91a58c66d88d503b836115becb01af94f5876e337", 0x1000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x6, 0xaf51, 0x2, 0x0, 0xe}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 04:08:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 04:08:37 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001d0003fd6d000036000000000cdd0700020000001f5f08c9080001000200", 0x22}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x8000, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xfffffffffffffffd, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) chmod(&(0x7f0000000600)='./file0\x00', 0x0) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write(0xffffffffffffffff, &(0x7f0000000040)='\"', 0x1) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)={{0x1cf, 0x6, 0x7fffffff, 0x158, 0x39e, 0x7, 0x111, 0x1}, "36ee33f44e77c2c50d72b1bef9fd33329e4ab248ac8314ae7dc47a0c329b3026cee71c144191693908ff0bef5353e7481cd43d4421facce7e6667109e17407051200badb9ddd7589f7bf9629eb19771c1b25117a675cec6e128a22e13589f5c5ccb5a32b373f99c147e865676c272aea477ae8c02a91c6c9f12b2cfac2412d768ba1b2d50add2eda00c677e6b3521335bf0334eaf6a775b3a1c5331966a838e1ead59b69dd78", [[], [], []]}, 0x3c6) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x9, 0x4) 04:08:37 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000004a0007351dfffd946f6105000a0080001f0000000000080008", 0x1d}], 0x1}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x7fffffff, 0x200200) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000500)=0x3, 0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) r4 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x212000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000,cache=none,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',privport,subj_user=,appraise_type=imasig,euid>', @ANYRESDEC=r3, @ANYBLOB="2c726f6f74636f6e746578743d757365725f752c7327296574683175736572626465762c736d61636b6673726f6f743d2f6465762f70746d78002c6673757569643d38390036356236372dee3863722d340037772d770065362d00323234386433322c7569643c00"/119, @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = syz_open_pts(r0, 0x109002) write(r5, &(0x7f0000000000), 0xffffff86) dup3(r5, r0, 0x0) 04:08:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x6}, 0x28, 0x3) clone(0x88183fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read(r1, 0x0, 0x3b1) 04:08:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="230000001a0081aee4050c00000f00fe0a8bc36f16000002000000bfd77ea14af3a311", 0x23}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x14) r2 = socket(0x15, 0xf, 0x2) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f00000002c0)="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", 0x1000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x6, 0xaf51, 0x2, 0x0, 0xe}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) 04:08:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1c20e000000000, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x800, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x101000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xa, &(0x7f00000002c0)=@raw=[@map={0x18, 0xf, 0x1, 0x0, r0}, @map={0x18, 0x3, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x3, 0x7, 0x2, 0xd, 0xffffffffffffffff, 0x1}, @generic={0x6, 0x9, 0x8, 0xffffffffffffffc0, 0x8}, @map={0x18, 0xf, 0x1, 0x0, r2}], &(0x7f0000000340)='GPL\x00', 0x2e1, 0xf1, &(0x7f0000000380)=""/241, 0x40f00, 0x1, [], r3, 0x4, r4, 0x8, &(0x7f0000000540)={0x10001, 0x8000}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x9, 0x3f}, 0x10}, 0x70) r5 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x48, 0x143080) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000200)=""/104) ioctl$TCSETXF(r5, 0x5434, &(0x7f0000000080)={0x9480, 0x10009, [0xffffffffffffffff, 0xcd4, 0x30000000000000, 0x1, 0xffffffffffff8000], 0x76}) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000100)) r6 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1f, 0x0) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000640)=""/184) mlockall(0x1) ioctl(r6, 0xffffffffbeffbfb9, 0x0) 04:08:38 executing program 3: getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040), 0x10) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x3, 'ip_vti0\x00', 0x1}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295b) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(0x0) dup2(r1, r2) 04:08:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x80000001, 0xfffffffffffffffc}}, 0x8) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffbe, 0x10000) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000080)={0x0, {0x53b, 0x9, 0x4ed, 0x1000}}) 04:08:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x8}]}, 0x1c}}, 0x0) 04:08:38 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f00000001c0)='./bus\x00', 0x2, 0x6, &(0x7f0000001480)=[{&(0x7f0000000240)="67e16df46ee1a1fb042f2b34358e43b0", 0x10, 0x2}, {&(0x7f0000000280)="1970e24ce52d9aa628663083d952d7e3389813cfcf265dcfbe0a9b8f718477ee70fc0874a8e70854e900860b9472667d27b5831d3cf486b8108097d3a9f4bd6e55dff14fd13a103d3f51979ad1b43e31f1719c2afe9a601e57d9e54d5fa3c8a054bfa40fe5f856fd03b0082034eae9a32b02699b95b3d3f6ea4c8b487efcedab65c2faba13a027257d4b60ba602439196d47c034666d44818f436d0707f6db84ac3db0ef46", 0xa5, 0x80000}, {&(0x7f0000000340)="cc971affc01f847d9baa3df91511ff3ffb6a04eab6157d4652f7922ee97f6711120a7b7d6c2933a955b06f33389683e638889439e4e511737080ffd6d757739687d5630ef2e969c2230b28cac6d7ed8847eb31c12cae56e8957212aeb129a256220788eb1ae576fc081e0193fa9a5f66fe5b0f4c801e9a44e1bd5a3c1f4d58a87ca746d68ae275b1d204aa895359bd768313ba646d9868149e05d9a1452dad9fb6c97b8d8826e350", 0xa8, 0x7}, {&(0x7f0000000400)="5137ed477638c8a59ac5aec8f24500b8cd44f7046d6833abd1a2a3435f67ead6d4391abdaabe6350c4ea3aab38", 0x2d}, {&(0x7f0000000440)="48e2f74980f16cad8a6421789916", 0xe, 0xffff}, {&(0x7f0000000480)="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", 0x1000, 0x9}], 0x1208004, &(0x7f0000001540)={[{@quota='quota'}, {@grpquota='grpquota'}, {@discard='discard'}, {@umask={'umask', 0x3d, 0x1}}, {@discard_size={'discard', 0x3d, 0x200}}, {@discard_size={'discard', 0x3d, 0x2}}, {@resize='resize'}, {@resize='resize'}], [{@permit_directio='permit_directio'}, {@obj_user={'obj_user'}}, {@obj_role={'obj_role', 0x3d, '!'}}, {@measure='measure'}, {@obj_user={'obj_user'}}, {@smackfsroot={'smackfsroot', 0x3d, 'lomd5sumeth1)'}}, {@dont_measure='dont_measure'}, {@pcr={'pcr', 0x3d, 0x28}}]}) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c4", 0x1}], 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xa76) r3 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) tee(r2, r3, 0x18, 0x0) 04:08:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:38 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='securityfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000080)={0x7dbb92df, 0x4, 0x15}) getdents(r0, &(0x7f00000000c0)=""/39, 0x27) getdents(r0, &(0x7f00000003c0)=""/147, 0x25) getdents(r0, &(0x7f0000000200)=""/172, 0xac) [ 253.846730][ T8367] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 253.866377][ T8364] JFS: discard option not supported on device [ 253.949740][ T8376] JFS: discard option not supported on device 04:08:40 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x67c0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(r2, 0x0, &(0x7f0000000040), 0x80000) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\r\xff', @ifru_names='bond_slave_1\x00'}) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\n\x00\n\x06!!\x00\x01`\x00', @ifru_names='bond_slave_1\x00'}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) 04:08:40 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x3dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") syz_mount_image$minix(&(0x7f0000000940)='minix\x00', &(0x7f0000000980)='./file0\x00', 0x56dc, 0x1, &(0x7f0000000a40)=[{&(0x7f00000009c0)="7f3ea2aed2e61ccb6e55e1bf6cd201af40f0b97b8a3e4d970b637902365fcbb80f8e388654a63741d997c26de0347a0cd9e5189e2dfeec017088b022b0e70b60562fb28318dce66b967bb253829174cc888ecda5747d18a85648932a2db4f48f", 0x60, 0x80000001}], 0x800, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x9de3, 0xffffffffffffffff, 0x6, 0x3, 0x3e, 0x800, 0x3c7, 0x40, 0x55, 0x8, 0x4, 0x38, 0x1, 0x7, 0x8, 0x5b}, [{0x0, 0x3, 0xf2c0, 0x9d5, 0x9, 0x6, 0x1, 0x9e}], "78526bd8cde4514d7d379d9cb2", [[], [], [], [], [], []]}, 0x685) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000900)={0xfb6, 0x2, 0x9000}, 0x4) write$P9_RRENAMEAT(r1, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) preadv(r1, &(0x7f0000000480), 0x1000000000000330, 0x0) 04:08:40 executing program 1: mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x1f, 0x1, 'client1\x00', 0xffffffff80000000, "c3b973f797adbf50", "3bf48188e9ee7f0fd4fb7944c47093809c3b665ab5bbe3cf46707bc351c8ed90", 0x1, 0x2}) fchdir(r0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'\\\xe3\x97\xd3\x1b\x05\x12\xa5\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 04:08:40 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0) write$P9_RSTAT(r0, &(0x7f0000000100)={0x56, 0x7d, 0x2, {0x0, 0x4f, 0x10001, 0x0, {0x0, 0x1}, 0x800000, 0xff, 0xf1ff, 0x1, 0x10, 'nodev+vboxnet0lo', 0x6, '\'ppp0^', 0x1, ')', 0x5, 'ppp0}'}}, 0x56) open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x4) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="24000000120007031dfffd946f6105000700000150f40000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:08:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @rand_addr=0x1}, 0x6, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000040)='team0\x00', 0x5, 0x5, 0x165b}) bind$bt_rfcomm(r2, &(0x7f0000000280)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x1c, 0x4) write$P9_ROPEN(r2, &(0x7f0000000000)={0x8, 0x12}, 0x18) read$alg(r2, &(0x7f0000000180)=""/229, 0xe5) 04:08:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x200000072, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffda0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e26, @local}, 0xfffffc7e) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x40, 0x105082) r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000000000), 0x10000206, 0x80ffe) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) socketpair$unix(0x1, 0x2004, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80003) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000002440)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/75, 0x4b}], 0x3}, 0xfffffffffffffff8}, {{&(0x7f0000002480)=@pppol2tpv3in6, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002500)=""/208, 0xd0}, {&(0x7f0000002600)=""/219, 0xdb}, {&(0x7f0000002700)=""/193, 0xc1}, {&(0x7f0000002800)=""/194, 0xc2}, {&(0x7f0000002900)=""/211, 0xd3}, {&(0x7f0000002a00)=""/134, 0x86}], 0x6, &(0x7f0000002b00)=""/4096, 0x1000}, 0x4}], 0x2, 0x0, &(0x7f0000003b40)={0x0, 0x989680}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x0, 0xfffffffffffffffb, 0x6}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) [ 256.526745][ T8404] bond0: Releasing backup interface bond_slave_1 04:08:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x6, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00pI\x00', 0x8}, 0x10) ioctl(r1, 0x8936, &(0x7f0000000000)) 04:08:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 256.567679][ T8406] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 04:08:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 256.717821][ T8416] IPVS: ftp: loaded support on port[0] = 21 04:08:41 executing program 3: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x40240) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x6, 0x1, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0xb0ff20, 0x1e, 0x2013, r0, 0x0) 04:08:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:41 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) writev(r0, &(0x7f0000001780)=[{&(0x7f0000001200)="df", 0x1}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400190a20ffff7f0000000002113b850e1de0974881000000fe58a2bc4a03049164643e89000200de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101900) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 04:08:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x9, 0x800) faccessat(r1, &(0x7f0000000240)='./file0\x00', 0xa0, 0x400) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x14) [ 257.124754][ T8394] bond0: Enslaving bond_slave_1 as an active interface with an up link 04:08:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000000000005, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x8, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x84040, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x30, r1, 0x180000000) 04:08:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{0x0}, {0x0}, {&(0x7f0000002280)=""/22, 0x16}], 0x3}}], 0x1, 0x0, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x2, {0x6, 0x6, 0x8000, 0x1}}) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/186, 0xba}}], 0x4000000000000e9, 0x2, 0x0) [ 257.301584][ T8416] IPVS: ftp: loaded support on port[0] = 21 04:08:41 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000180)={0x31b, 0x1, 0x0, {0x8}}, 0xffffffffffffffc6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40800, 0x0) accept4$ax25(r1, 0x0, &(0x7f0000000100), 0x80800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x3}, &(0x7f0000000200)=0x8) io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 04:08:41 executing program 3: r0 = socket$inet(0x10, 0x80006, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000004f0007031dfffd946fa28300200a0a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 04:08:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 258.865899][ T7891] Bluetooth: hci0: command 0x1003 tx timeout [ 258.872376][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 260.945100][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 260.951572][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 263.035044][ T7891] Bluetooth: hci0: command 0x1009 tx timeout 04:08:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:08:51 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:51 executing program 5: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000900)={0x0, 0x80, 0x2, 0x4, 0xe, 0x0, 0x0, 0x5, 0x0, 0x2, 0x6, 0x3ff}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x81000008912, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x0, 0x8) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000740)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000880)=0xe8) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000dc0)={0x50001, 0x0, [0x1, 0xad9, 0x2, 0x2, 0x7, 0x7ff, 0x9, 0x4]}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000e40)={0x1, 0x0, 0x6, 0x1ff, 0x4, 0x0, 0x7, 0x3, 0x5, 0x1, 0x4d1, 0x7}) fstat(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000008c0)=0x0) r5 = geteuid() r6 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a40)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) getresgid(&(0x7f0000000b80)=0x0, &(0x7f0000000bc0), &(0x7f0000000c00)) sendmsg$unix(r0, &(0x7f0000000d40)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000640)="e2dba60e78fde97f063c40568f63ba5068ecf1b13959911e2c298cb6ff7707ca9818a915dcd9c02e1e5bce8e66295d1fef3e5ba968d576b8e924d07ccf13a73f61b41f994050f6306c44cbad8e4460fa997109729e1e249d32afed8d357187c7d226a72dc73dc3b08ce620d0e8e387de7c90b7a6872bdc903a08d9917f31491aa9a6071f40066cd4b866296aaf8467328a4f24c4ff793d6aa37deb5321df3235b1bb7e5cc564f2e197cfa28f259f7e7320a4ef0be1fee1211ce5d7cab3135659fb", 0xc1}, {&(0x7f00000000c0)="75cf5f", 0x3}, {&(0x7f00000002c0)="268c7a43a4ed11748f172f0b5cc73abb4d87a78ce6b392d4725415f225f63235a42825c819dea92cef77f67a78a8cfd10a49faeccbf8b71ca6355607a58e2fe79e629f957851", 0x46}, {&(0x7f0000000380)="ae02c83fef5660ce8eeed39fd7483d323e8f178b891858ea0340ddb235f5156f7cfd3cb53da1214ef6414224c2f1f4669843d502db2c05d85231c3a7855b0a4bc1a51b757094ccc5e2cba960d00ed8c9fc627ffee70dba568f508d0d40722cc6568a719a74d1e9ee", 0x68}], 0x4, &(0x7f0000000c40)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0xf0, 0x804}, 0x40) r10 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r11 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x100000000004) r12 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000e80)) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000d80)=r4) write(r11, &(0x7f0000000400)="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", 0x200) sendfile(r11, r12, 0x0, 0xc700000e) 04:08:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xa35) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000200)={0x401, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2c00590cd291cdbc0aa5b8dacd2abd50a5c28ec0320000000017b62be625b55f75c1d7417f2fa6969abaab6e57195dd92d35912caf485181f0ebc0a2f0433c8c80832a0e4da89c05d0c455a4228be93eae2197dc920114b0590469bf830628510abb842940fcd11605422fa37e0561f3ee94057f36dd9b78db8c99e6d437c569268d9f91a668d5fdf2460347a066a2f677ed77e75b76bad5a42ace3e270ec8850ab2913b8c0b4ab5eee16e776868c4b7ff7396bcad579d"]) perf_event_open(&(0x7f0000000280)={0x83efcbec12afd504, 0x70, 0x7fff, 0x24, 0x3, 0x0, 0x0, 0x9, 0x81000, 0x1, 0x2, 0x800, 0x4, 0x1, 0xffffffff, 0x9, 0x0, 0x2, 0xfff, 0x1, 0x3, 0xfffffffffffffffe, 0xffffffffffffff97, 0xffffffff, 0x0, 0x0, 0x8, 0x9, 0x2, 0x9e, 0x4, 0xfffffffffffffbff, 0x2, 0x80000000, 0x3, 0x1, 0xffff, 0x8001, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0xd}, 0x10000, 0x4, 0x5, 0x0, 0xffffffffffff0001, 0x10001, 0x401}, 0x0, 0x1, 0xffffffffffffffff, 0xb) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x200056d0, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 04:08:51 executing program 4: open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ftruncate(r0, 0x208200) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) accept4$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 04:08:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x400) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) setsockopt(r0, 0x4, 0x5, &(0x7f0000000180)="88406d277be787721c5b3cfe266679ec0cfb5ac2d7cf6b3e9983907b7d8a2935f6e6ecf083f08cb2b3b856ed0d4bf2808e4275b8b7d9fa81962bc766a44d3fa3581142c9af1c8cfe7df1db7b631129e55e4105ee3e191ae27eb683fa9db133b98c4dbcc89840dfe58740da1f96ba97405ef21874f1383b3d400e75a3954d821df835a5f766809498644ba8d2f3ce8d8ad7f9479a86a69cdabc80598e5281f3bf3b64784fa51b2843feae063ee272ea66fee397e5b090bd0ba3fb75de15300ce0459053db29bdab9c2cfb06054bf88011d511e3546d888ddd77f3bd105a7b56a929443ad10738548aa9e140438ec41bf12ad2b68302f90ea34c70e33897deee8fc9ac4f003f5621e4e58665ceb6e19e4be21453251e2d99fed54a10474ebacc9e112a11bd572500b09137117ffcd156c306b0b420fb08658112fdc8a000844fa648769c3fd4f2727a286f728ce65be96e9cef75fa46c570ad802f909a68696a936cadc4bf6757bc6b3c550ae95bb9c970798d59b6dad24bc76a69042b254b5022996f749b67ce40371d0851234dc05406a65937bebb260e2f141221cb273954865393f9d19ddc9a3905cd1acae359d84b669481bbf2d666c7fccf4d7e92fe0eec8a0b3c8b4bebf49f7b6f3d919d8aa3e77af1362e534db16278390c09e975006b80a79a2672495d007caeb6ee760c7649f5b293cb88b0c231a7fad0754bc0f3013d121e591787f597793c2348aa3e2cf9a16b030f256bbbd79695ecb75ef2572f5eb7c42bde8f1cb617b66318747d816974f2c783e55165128cb4762e931da2957e7d5a8d35046dfc91581fa29e2852ad556390fa7fbf8cbcf7156e46cca9b772ae0916f0e1ce388c09bd2db700e155768ec7709b8fd39556eecdd1887385eec057667edda66784fe80c056127618cbdf650e272b74624fd762e46ff6718d63ad18e923e7da48248c21f08e85dc511fb2c7598237ebb7be19ef89c8b77b17136599235c1afbd1bced08d6eee439293f6cdea2802ec4872934aef113d2df1fa79c1c1fe99daee8e616ad200b00d77600d764c84220cc0f241a80d53c087069ccb1ad6e0239e7b0f4c0dfad38b3e83626f1e5d5f8cfe9d5939993ee1a3879b71e7289f4462dcdd007e8d39d9b37afdf032d41410c32b36b6c94a9d5c7bd93cb26abadaec3cfbb39dc0ff4cdf705f2ae0fcd6835005d8743a8ba6c7590b7808db71b59a464cf50a1a471435de324286af59986022f341d7acc0ed719047c71cd7f66a1a084c7c18f84278d004cce59ca48f5710b867ae50ce897fc48605797c6be1456014efc1de6dc7746d47155515afb009c8de369ac4bf5a4bbb18bf6ee47e48b608c18e98ea722fb6ffa72247045888cf3f3d936ec469926570d02132f894cd8db533ee7fc04be463dff14609234264ef554dda5c3bd17fa28ceec32392bfd536b5d99e0fd67482ae79aa0206248b533452f29f40f4d78f0902d2ccbb2f622b1fd226044badd750e08d080b7c31d9e9963c0229a7a7e338021dfa685adaf4b84d4db677f7b116be9425fc43dca0a141c5d407a4b7f7d6a8309c54343c5e5b04ce0868e18e47cdb21f690be3bf5ac8658875db4893a0c793a07301442167f9a53514b2d0dc43a31e4c53b3179f9f337f35868236a1926a110dc042edfecfc5fc772cc99bc7f53087af01ceaff7fe9741378e6fccebbaaa3d48db51b3dff09cca909b27ec437e5d7ff61e9698cd743be7352d028a8bd23fe11c84083e6a95f06dff371d1809e714519e6ae1f782bfb69b1e7037eb24a4cdb212bacf585eef6e13e37183bb8ede74939ebb654c88358dec5acee958497bc8138b3b0521b3875ae4e56a14924c6cb3b80c77e1165f4f16201547d5024cbe41223ff1ba35fd76bb9bbb84d5dd0826195e0a02de07efcad87b04c17fb348ea02becbe7f6835a696bbc18a5f7a61fc743e4a3142782b79ebd79521d85578ed78156e1011c837f2141e104dcd8a815a41f54cd8a368c3221aacdc945d7de17931cedaba8cf8c544209ee4a21c37dea3f53696ded409208efbc9c7fc73292100270e75ef81d36a8c3704ceb8dcb54d70601ce73171d943a8f4a253ac38e79b3f03f4af186665db5a57a95f13d798e937414b8c11150fdcb0f15478eb79ecb78c870941624706b73fe90fbfb336ff9c9927c422f69c0247dfe9f67dcb1a82e803e28c05ea77ac421068e43f51c5d7232cb9b7f03326d4c361c002a14230d8366b5ff2928dc99140ef41ca3e5492654d298a2b4f23147c3693fdb9af0f96f2208e9a5cbdaf8d5f19aaf901f30ee6f7f89cd6ca13875e9fcb7e5bca00f1b3548aaf7464ce775d0d2a229c9dd4b8821d105663861d3f90c88b5591ad82d06f6805008dc1172c7e2815736d9f81b7fcdcf9f2e41a113a7ec9c3cf583cfc251c67b75c0e79405b2117cf063f48a94e8b8b0e9ddb490505adbcc81713908b2b6c66ef59e99b231746b3f0c24347f39ed945abd670e7b9ea4adf5fce914b02c83642b210d95227903ff4fcd810b8c74485356b0a9501fa5d4c4785a0b3fd88a5af04bb473cfc51d711da0150ac93ff3049dfb9cddbe2edee53038485cedb370f7a6d95472acb8031b60c7d2268a0f51313b076a8b079d841ad42bd3b58f2b142d345af9a05ac57fb19996a2c743cf1c84a4fdf08d7d347740356e37188beade1a36a8fb51d0f7ec3d97ad8412caa20a23ad81a56eaf52c4c89c3021c859df15108a7e9f568878639e3f0a0f60e4c65d02e40ea66956e62440cfd24c2fb1dec98b3306a9a1dd1d890a3b3705a8b1ac65c9f7e632b9a58ab82d44d91baded56a82a4037986b34a5a16cee5afdc3623dd59b6edc0314f3573c67f09d60a6f1fdb511cbbbedda44aa145e310237f6d75ed1e0015e5a8476f30fc9a6082f7a2d8b53a6ea63693190bf07b31b7d3bda581b5655bfc741b63232ec3b15583f5f3ff3f3818e51ebdc28afa53542e5edc2f2dee0ea864a4d692b7dc954192bd6f77e08b6f00ca3dfdb1f2db1f476582a74b18a5e74170ded75e27a2f3fe61795323f2080c4a3252c294ddbebe2146664b56c71073b9c697486c0d42a4989cdc9843cdec507a70437a487d83f5dec9b243e6c4f283b656d17320b7aa9ab519839db0bd5bfcc24ecf85c3521eefa425a71ec3ee2bd290abcd4164305837306f31cb248c0b7ab0292dd89069cf0890ff702d58b28deda0b459dc0dd18aeadf5a3a4089b9f44dc1bced4ef36762f2ef957d43aaf0d7d82d16ada3f7b585200ea6e07bbb699b0a86b771f32187cb51136967c1404c2640c67c4411dc1e109e37f9cfe74d31ad21cb4b565eb7863b7476a118c73de79e197ec4bb8ea57b754433b3fdef2732f625505a747e28ba481c893d6bcd283e2411a56bd5d3ffab502867cd0636a4d4bd55ecfdb71ad3b0ffb4ceffb225e6222351eb04002ea482cb12c2a5cc34278dd78be14e0dc214ed3ff8b116bf443939e10001f019f4f420be31389c050b359806c6c866f1d62077b3c4341f46f8daa186a64ba257a6580ac7224588972fdd71d0ce3d1f61ea50e3f431b108b05e76442e4552cb7f18cebdb658cc921bf5cb4903969589a9c163940a6ddb7f50498def89228eac2382bc55ab6eef1457786196898a0998b0ca75d04629d47f016b9582c53a89e9e30c4bcc0a9f9fa5244596aacfca444003f85c3635df84e7d6050a2a8b630f8c7ca6942a4dbb7e4dac87e61938bbd43da160d947c1585456336a651550f63b3602bbed58b6e27d0c340ea6de7892b7dbfeeedef02781df3b8aabb85a39195261191a3e0273b00952f5a625255b3b3709c1c2b89fd620412081fb62169b80ef8624a079f082808b6e863624c5a8e1ca3eeecbe7d0400696ba435023db804736a63e4ffdc26bb126ad7269ebe2add0d99e65ec8316c9e868abd4edf7eee58995d468cdf893888dce8ea1f42c6395a8b69645c79651b295227fd601b9bdcdbaec66fdca790e2fbf875f1d0107e9eb4c715d32e6d5da45509496321b668d681a36d6da14fbcd077698064a25f7a1fc7664b7c274751bd59b9e0fd37cf723986f7f9d1c10c9e6211439be285fbffe784d1ffcdb700df61d3d50fb915677bdf166d181e098165e68d0ff34d2eed4001fd6aead2a2443b8aaca4ce4ce755acd1e3e0ffceddb0def8e5f7baf22d8dd657c0564a8bfd0a17976ea522119328dc43ed9fff398673e2ee309d43e10a92d583becdb63044d5ac10d0cbdf73caf7449d64e4da012ed7637f8a7d39cf0e825e1316c45edc11100fd763ab1d8d3598c0e3499d5dacc0a6e4f288c8e34e0fb7ace79c6d8a3967dbb378c39a38ed2da2d0d639699cf8b39e85482eb31278a0c9abf839621de3c1d412dd363dfce58f7a28d8f37efc8048af09cfd8bd82cc6108d365ca53997c02bf8f0ffb97f4864c16a25e64f41e3cf90312c74a22eba049ec6fbb92df8295f80a5d454fc948908b54f482106fa427f97c6b8640c51a873f2ed0048faff814c56685c873c4f00a068709a3ba8c092b976f14e5849707129651f2997627f12f4491242ce124651b52d0369c98b92e04f53fbef34f437ffa8ff4bc57f1216a05471aeff86386007a975be7e4e7723de1ff2a511a48a19f205e38deddc8e294c8ff0dd9eb9d8e25e48a8435efa83ce5e08ff1474ae808ca77ef97fe84a6ba2979c85a944706aac10304211164e684dfd430f6d3db817a829c4f7a0d6ef2ed5889a7209295b19a57578aee71a07ba3d5f2e3adfaddff911513843d9505e69d554b488a1ba856537ac19bdfe72c0f17aa264b9be807dce47203c902400ce9de686ab65e2e4c1962104bcbe5c93b6a693f5f3d98fd494dc5bb28a0f9f3b9592642c2855720b09f9a384c3da80551a7ed0d996482370d31f429a2697096d109f5f83072f91c6e9f65943ee2188b89917009b23be30335707d16fb1742c7bb6e9886d515c4a182c85f0c85620bd3d2b5094f7396ad016d0856d33f67d76de55fc244d0263aa50dcf06ee76760b0ac2ceb8a16279ce06cfd34870536260ebf635e2c8d2eaa798a5e01a1a5d90bbebdc1495f3bfedbb38c4e44a8bcb95d9a4d032acc514a9ed07b4a760ee5d8394176243ccee77611aa02d12eb5965e9d8f18874ca8fe712e3756e790d2e5aac4520ee93343a15e23d7ca46139917a7948c77399994101f20f14aba215c1afb699e8796676d71c094ba64d0f2beac10567edf29d784cf123506633873aab3a92d9c2f72845a68b719f26f97e1256a945111dcfb541591048e38232a5267a75b91bdf0bc51832f13385b056818b15ee1b41c42e59140601cc8928430ec91d92500bd4d82b12c07051715af247d2d64bb432005372ad2e04da2c657531f860d9b6717b187168fdec3f3b2029a4c62984c878a480fabfe7f5f39dfae7f44863c32398fd74af63f7be12999ae7f96004aa525d13dd0d8eab3acaddb39c5af4b513278dce9c52708ec43f0af7405646814c966261d054d885dd853b063dab48cfe3fa1fc8a9c55aab0fe85a2e6d6733751df29ad9c798bcbe02607684734f323ca5ab9abdbe08696d8208d5da962634b20129b408db56bf008e4cabd157e7568375af870859a6636b20af2e2e55c49c4e2f7837dfb9848d80ff058d477d5cf8d3f2792c3d2ce75f77a4ac20fb6f17173a4387f918b8da2d82e95f51d1d9c8a1c6d1c3e48d3e978873339ac9d26608c9e1ce9c43b52dfe6dd555d78221ea8c801f13e3c993b84080468287112997796b9ada5a5d42850e799960e55ba9cf9f38f50b9d53f235f", 0x1000) ioctl(r1, 0x1000028912, &(0x7f0000000100)="0adc1f123c123f31080070e019082c2fc69cd6e09c7127fa4012db223f1c14") r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af25, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000001180), &(0x7f00000011c0)=0x0) quotactl(0x3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000001200)="6a6362fd8e64d0241d7cc4abbf33e241cfa85632e6e9750a50ee408c65744bd075791252088f64b0f9b8c0ad9861b9c3254d6060e9c8e2d95b771001e77818115d9de76fe6d9c7c9bbd994b78bddb0dc27f407af05add8") 04:08:51 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:51 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:08:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffff7ffbbfffffff, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="9b247f9c1793", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) read(r1, 0x0, 0x2dc) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x8, 0x4) 04:08:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x24, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) 04:08:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x721, 0x2, 0x80, 0x5, 0x1b, 0xf3c, 0x1ff, 0xffffffffffffffc1, 0x3, 0x4, 0x8, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffc43, 0x1) [ 269.585116][ T7887] Bluetooth: hci0: command 0x1003 tx timeout [ 269.592911][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 271.665033][ T7891] Bluetooth: hci0: command 0x1001 tx timeout [ 271.671150][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 273.745055][ T7887] Bluetooth: hci0: command 0x1009 tx timeout 04:09:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:02 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000380)={@initdev, @broadcast}, &(0x7f00000003c0)=0x8) gettid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() r2 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='md5sum\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r2, 0x1, 0x5}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'cbcmac(tnepres)\x00'}}, &(0x7f0000000100)="3a7392eb03c81fe534286b118bee98b10caf32700fac8b009a8b8c0bbdcf23d9f745ae026338763b84df16cd4b827c1d55cbfb", &(0x7f0000000280)=""/255) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 04:09:02 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:02 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000280)=""/37) prctl$PR_GET_SECCOMP(0x15) fcntl$getown(r0, 0x9) setresgid(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = semget$private(0x0, 0x0, 0x120) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000140)=0xe8) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000600)=0x5da3, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe8, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf36}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="87f67529c165149c74c08b1dd54137e0"}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffff800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000) r8 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000380)=0x4) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000300)={{0x6, r6, r8, r9, r10, 0x8, 0x2}, 0x8, 0x10000, 0x8}) close(r2) syz_open_dev$video4linux(&(0x7f0000000440)='/dev/v4l-subdev#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f00000002c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000380)="b8"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x100) [ 277.706654][ T8547] binder: 8546:8547 got reply transaction with no transaction stack [ 277.748825][ T8547] binder: 8546:8547 transaction failed 29201/-71, size 0-0 line 2900 [ 277.787396][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 277.806633][ T8547] binder: 8546:8547 got reply transaction with no transaction stack [ 277.826166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 277.832492][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:09:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 277.869729][ T8547] binder: 8546:8547 transaction failed 29201/-71, size 0-0 line 2900 04:09:02 executing program 3: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000380)={@initdev, @broadcast}, &(0x7f00000003c0)=0x8) gettid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() r2 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='md5sum\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r2, 0x1, 0x5}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'cbcmac(tnepres)\x00'}}, &(0x7f0000000100)="3a7392eb03c81fe534286b118bee98b10caf32700fac8b009a8b8c0bbdcf23d9f745ae026338763b84df16cd4b827c1d55cbfb", &(0x7f0000000280)=""/255) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 04:09:02 executing program 4: r0 = socket$inet(0x2, 0x80803, 0x9) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="b8b2c4343d91a93bdb7164a338fd0331391dd0b7dd4587f1f2b1872d7f02000000511b939acfd7629a68f509a43eb51452bd530aa98d7771eae03f420e6e6c4593280b17f7dde9d53f1cd27fda876cbaf83febf43702de0888955206e198b11de854edfa3bb4d3dc28d607fff9e4c3737df3a458f0fd2805316d2b15fff796898e42f68a4897ef", 0x87) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000035c0)=@in, 0x80, 0x0}}], 0x1, 0x0) 04:09:02 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:02 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x8000000000a4) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) pipe(0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x20400) syz_genetlink_get_family_id$ipvs(0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0x7fffffff, 0xffffffff80000001}}) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10400}, 0xc, 0x0}, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x10) keyctl$session_to_parent(0x12) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xbd, 0x279d}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) keyctl$join(0x1, 0x0) 04:09:02 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x4004400}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x9d, "b6d5dbe8f8a008b0cf0f3d2684d6687bcdf3792d6752c96ca9bddf4c38f8f5ea9f18387f52c73b96d4d28a54d72c55923e4ee7ed3e5c373024f35983dee4904873f8779452d1d82379735709d9333c10d3ce5de671eb16e54e286e6a900ebfdf7e24e52745cb526b3d8185bd38dd31566cc750976268bad17e1c52345623b5ce4ecabc05d85799aca36a7161326049e75ad5caf8df16cde7aa313f155b"}, &(0x7f0000000080)=0xa5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x148, 0x4) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffe000/0x2000)=nil, 0x4, 0x4, 0x10, &(0x7f0000ffe000/0x2000)=nil, 0x1}) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, 0x4) [ 279.825085][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 279.831188][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 281.905032][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 281.911174][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 283.985055][ T22] Bluetooth: hci0: command 0x1009 tx timeout 04:09:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:12 executing program 3: r0 = open(&(0x7f0000000b00)='./file0\x00', 0x80040, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r0) 04:09:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, 0x0) close(r0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x3, 0x80000001, 0x3, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000e10030000000000000d200000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/210], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af03, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000200)={0x0, {0x13, 0x5}}) bind$bt_sco(r2, &(0x7f00000001c0)={0x1f, {0x5, 0x2, 0xfffffffffffffe01, 0x100000001, 0x100000001, 0xa41}}, 0x8) 04:09:12 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:12 executing program 5: r0 = socket$inet(0x10, 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x6, 0x4) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000130007041dfffd946f610500070000001d00000004000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 04:09:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") keyctl$get_keyring_id(0x8, 0x0, 0xfffffff9) [ 288.014381][ T8613] Unknown ioctl -1070574058 04:09:12 executing program 5: 04:09:12 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 04:09:12 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:12 executing program 3: [ 288.081654][ T8630] Unknown ioctl -1070574058 04:09:12 executing program 4: [ 288.225070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 288.230941][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 290.064973][ T7887] Bluetooth: hci0: command 0x1003 tx timeout [ 290.071081][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 292.144963][ T7891] Bluetooth: hci0: command 0x1001 tx timeout [ 292.151084][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 294.224997][ T7887] Bluetooth: hci0: command 0x1009 tx timeout 04:09:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:22 executing program 3: 04:09:22 executing program 5: 04:09:22 executing program 4: 04:09:22 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 04:09:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:22 executing program 3: 04:09:22 executing program 4: 04:09:22 executing program 5: 04:09:22 executing program 0: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 04:09:22 executing program 3: 04:09:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:22 executing program 4: 04:09:22 executing program 3: 04:09:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/g|o<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\xf9\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\x9e8\x06\x8f\x84^\xb8\xfc\x93\xdc5~\xb2\x8a\xb36\x13\xee\x82\xc1\f\xe2\xb5\xf9\xa0\x87\x88:*\x87\x14s\x92\\\xb5\x9e\x19>\xf3N\rL.\xb2G`\xe2y\x92\x11\x01\n/\x8fc\xe8f\x9b\xd9H\xfdR\xe4f\x8b\xf6\xffl;u\xb5:\x01g\xb8\xd9\xa5~>\x06f\xff\xfc\xf4\x84\xd0E\xc3\xca\x14\xf6%9fN\a\xa0\x93]\x12:\xc2\xb2\x0e\xc6\xad\xcb\vI\xbe\x1cKyv\xb9\xb6\xef\x03\xe3\xcc\b\x89NQ\x19\xc0\xa7\x05`\xef\x1aN\xbeT\xa2\aB\xc6\x02\xff\xff\xee\xc6;E\x19\x9c1}z\xda(\x93\x1b\xd5\x01\'B\x8d\xd5t\xf2\xa20\xdd\x1c\x1f\x00\xaaYn2\xa8\xb3\xbc\x86|M\x99\xad\xd4P&-fn\b\x0e\xfe\x05\xb6\xec\xaa`\xdb\x8b^\xbc^%\x9c6\x0f\xb2\xc7\xb5]\x94a\x1b\xbeP\x00\x1c3|\x8fB\xf4o\xd3\xec\xf2?\x8f\x00\xbc\xd8\\\xb0\t\xfa4\t\x8e[\xafb\t\xaa*\x19\xa4\xbb\x7f', 0x2761, 0x0) 04:09:22 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:22 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\xf9\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\x9e8\x06\x8f\x84^\xb8\xfc\x93\xdc5~\xb2\x8a\xb36\x13\xee\x82\xc1\f\xe2\xb5\xf9\xa0\x87\x88:*\x87\x14s\x92\\\xb5\x9e\x19>\xf3N\rL.\xb2G`\xe2y\x92\x11\x01\n/\x8fc\xe8f\x9b\xd9H\xfdR\xe4f\x8b\xf6\xffl;u\xb5:\x01g\xb8\xd9\xa5~>\x06f\xff\xfc\xf4\x84\xd0E\xc3\xca\x14\xf6%9fN\a\xa0\x93]\x12:\xc2\xb2\x0e\xc6\xad\xcb\vI\xbe\x1cKyv\xb9\xb6\xef\x03\xe3\xcc\b\x89NQ\x19\xc0\xa7\x05`\xef\x1aN\xbeT\xa2\aB\xc6\x02\xff\xff\xee\xc6;E\x19\x9c1}z\xda(\x93\x1b\xd5\x01\'B\x8d\xd5t\xf2\xa20\xdd\x1c\x1f\x00\xaaYn2\xa8\xb3\xbc\x86|M\x99\xad\xd4P&-fn\b\x0e\xfe\x05\xb6\xec\xaa`\xdb\x8b^\xbc^%\x9c6\x0f\xb2\xc7\xb5]\x94a\x1b\xbeP\x00\x1c3|\x8fB\xf4o\xd3\xec\xf2?\x8f\x00\xbc\xd8\\\xb0\t\xfa4\t\x8e[\xafb\t\xaa*\x19\xa4\xbb\x7f', 0x2761, 0x0) 04:09:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x602200, 0x4, 0x4002011, r1, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 04:09:23 executing program 3: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 04:09:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x20) 04:09:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 298.766617][ T26] audit: type=1804 audit(1556078963.137:32): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir393090187/syzkaller.D7ATHE/28/bus" dev="sda1" ino=16687 res=1 04:09:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 298.878750][ T26] audit: type=1804 audit(1556078963.157:33): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir393090187/syzkaller.D7ATHE/28/bus" dev="sda1" ino=16687 res=1 04:09:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:23 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 298.942801][ T26] audit: type=1804 audit(1556078963.157:34): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir393090187/syzkaller.D7ATHE/28/bus" dev="sda1" ino=16687 res=1 04:09:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x10000000000, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x200, 0x5, 0x8000}, 0x98) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x2) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 04:09:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 5: r0 = gettid() sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x5) r1 = socket$inet6(0xa, 0x80003, 0xfe) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x26, 0x1, "05"}}) ptrace$peekuser(0x3, r0, 0x101) 04:09:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:23 executing program 4: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000019002551075c0165ff0ffc02802000030011000500e1000c080003008000a000", 0x24) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0xfffffffffffffffd) 04:09:23 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0xffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x13) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x1) fcntl$addseals(r2, 0x409, 0x2) 04:09:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) 04:09:23 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x1, 0xf, 0x4, 0x200000, {0x77359400}, {0x5, 0xd, 0x4, 0x3, 0x5, 0xd4db, "fb509b7f"}, 0x4c82, 0x7, @planes=&(0x7f00000000c0)={0x3000000000, 0x0, @mem_offset=0x6, 0x3ff}, 0x4}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 299.425140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 299.431882][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:09:23 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)="7ddb90da41eadb53961fd81d9c87bcd7c1a0a8131c69f43467bc7d8ebdf5e9f4d258226109cbabfdb9d412d9b7893453cb6235bb8ec4530d19cdc7c1e6e4897f397e8416edfceb8b938ef1b1fa4dbdd17fb6dbecb44bbb68a9a7e8910dbe738887b9f4594201cc1cf75a12f70b86390b9e712d3a0ffd2db87363a1e06514c206a33179b4d8fdbbad8e", {0x28, 0x100000001, 0x5f4f575f, 0xb, 0x6, 0xffffffff, 0xe, 0x1000}}) readv(r1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000001780)={0x400, 0xfffffffffffffe00, 0x7fffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x6000, 0x0, {0x4}}, 0x14}}, 0x0) 04:09:23 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) 04:09:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x28, &(0x7f0000000000)=0x2ecc, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001600)='/dev/audio\x00', 0x400000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vfio/vfio\x00', 0x200000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001800)='/dev/midi#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x0, 0x8000}, 0x4000) syz_open_dev$sndctrl(0x0, 0x9b1, 0x80) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(0x0, 0x400, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) quotactl(0x3ff, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() sched_setattr(r5, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x5, 0x6, 0x100, 0x0, 0xffffffffffffc14d}, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x100000000004) r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r6, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r6, r7, 0x0, 0xc700000e) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000006c0)=0x101, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x82) 04:09:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x8001, 0x111000) fcntl$addseals(r0, 0x409, 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xa15b, 0x8001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x40, 0x0, 0x8, 0xfffffffffffffff9, 0x800, 0x5, 0x3, r2}, &(0x7f0000000200)=0x20) init_module(&(0x7f00000001c0)=':(vmnet0)keyringsecurity\x00', 0x19, &(0x7f00000000c0)='@cgroupGPLtrusted\x00') gettid() [ 299.677850][ T26] audit: type=1800 audit(1556078964.047:35): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=3 res=0 04:09:24 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) [ 299.769593][ T26] audit: type=1804 audit(1556078964.057:36): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir041199400/syzkaller.KtTzF2/34/file0/file0" dev="loop3" ino=3 res=1 04:09:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 299.978923][ T26] audit: type=1800 audit(1556078964.057:37): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=3 res=0 04:09:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x410000, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004280)='/dev/sequencer2\x00', 0x2000, 0x0) bind$netlink(r2, &(0x7f00000042c0)={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet(0x2, 0x3, 0x2b7) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0xa0003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:09:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x28, &(0x7f0000000000)=0x2ecc, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001600)='/dev/audio\x00', 0x400000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vfio/vfio\x00', 0x200000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001800)='/dev/midi#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x0, 0x8000}, 0x4000) syz_open_dev$sndctrl(0x0, 0x9b1, 0x80) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(0x0, 0x400, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) quotactl(0x3ff, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() sched_setattr(r5, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x5, 0x6, 0x100, 0x0, 0xffffffffffffc14d}, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x100000000004) r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r6, &(0x7f0000000400)="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", 0x200) sendfile(r6, r7, 0x0, 0xc700000e) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000006c0)=0x101, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x82) 04:09:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 300.144997][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 300.150874][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 300.267764][ T26] audit: type=1800 audit(1556078964.627:38): pid=8830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16692 res=0 [ 300.337987][ T26] audit: type=1804 audit(1556078964.687:39): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir041199400/syzkaller.KtTzF2/35/file0/file0" dev="sda1" ino=16692 res=1 [ 300.371622][ T26] audit: type=1800 audit(1556078964.687:40): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16692 res=0 04:09:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)="7ddb90da41eadb53961fd81d9c87bcd7c1a0a8131c69f43467bc7d8ebdf5e9f4d258226109cbabfdb9d412d9b7893453cb6235bb8ec4530d19cdc7c1e6e4897f397e8416edfceb8b938ef1b1fa4dbdd17fb6dbecb44bbb68a9a7e8910dbe738887b9f4594201cc1cf75a12f70b86390b9e712d3a0ffd2db87363a1e06514c206a33179b4d8fdbbad8e", {0x28, 0x100000001, 0x5f4f575f, 0xb, 0x6, 0xffffffff, 0xe, 0x1000}}) readv(r1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000001780)={0x400, 0xfffffffffffffe00, 0x7fffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x6000, 0x0, {0x4}}, 0x14}}, 0x0) 04:09:24 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 04:09:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:24 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x28, &(0x7f0000000000)=0x2ecc, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001600)='/dev/audio\x00', 0x400000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vfio/vfio\x00', 0x200000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001800)='/dev/midi#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x0, 0x8000}, 0x4000) syz_open_dev$sndctrl(0x0, 0x9b1, 0x80) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(0x0, 0x400, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) quotactl(0x3ff, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() sched_setattr(r5, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x5, 0x6, 0x100, 0x0, 0xffffffffffffc14d}, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x100000000004) r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r6, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r6, r7, 0x0, 0xc700000e) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000006c0)=0x101, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x82) 04:09:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 300.545062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 300.550924][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:09:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 300.582841][ T26] audit: type=1800 audit(1556078964.947:41): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=4 res=0 04:09:25 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 04:09:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400602) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x3ff, @local, 0x3}}}, 0x84) r2 = dup(0xffffffffffffffff) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000000)=0x8) 04:09:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 301.109076][ T8870] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 04:09:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x28, &(0x7f0000000000)=0x2ecc, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001600)='/dev/audio\x00', 0x400000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vfio/vfio\x00', 0x200000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001800)='/dev/midi#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x0, 0x8000}, 0x4000) syz_open_dev$sndctrl(0x0, 0x9b1, 0x80) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(0x0, 0x400, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) quotactl(0x3ff, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() sched_setattr(r5, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x5, 0x6, 0x100, 0x0, 0xffffffffffffc14d}, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x100000000004) r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r6, &(0x7f0000000400)="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", 0x200) sendfile(r6, r7, 0x0, 0xc700000e) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000006c0)=0x101, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x82) 04:09:25 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 04:09:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044326, &(0x7f0000000000)) 04:09:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x3f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x5, 0x70, 0x212, 0xc91, 0x1, 0x10001, 0x0, 0x0, 0x1, 0x7, 0x348, 0x7fffffff, 0x9, 0x2, 0x400, 0x735, 0xbe, 0x6, 0x5, 0x6, 0x0, 0x100000001, 0x4, 0x101, 0x4, 0x81, 0x800, 0xffffffffffffff01, 0x2a5ac529, 0x3, 0x16c2, 0x4, 0x7fff, 0x401, 0x5, 0x5, 0x6, 0x6, 0x0, 0x1, 0x5, @perf_config_ext={0x8, 0x4d50}, 0x0, 0x0, 0x1, 0x6, 0x9, 0x0, 0xed0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/4096, 0x1000}, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000200)={0x2, 0x40, &(0x7f00000001c0)="d55bec93609b46620c23da3ad41b76df1e7664abacf8e5e87e4847e35a96d4f1c873590b3df96b24040fb8ee39fadf92b25cc7a10f07", {0x2, 0x5, 0x5a4f4f53, 0x6, 0x800, 0x0, 0x3, 0x4}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x100000000000010b) 04:09:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:25 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 301.345164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 301.351025][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:09:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044326, &(0x7f0000000000)) 04:09:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 301.504968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 301.518594][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:09:25 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x46c6, 0x4) syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x4000000000002ad, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x8000) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) 04:09:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x28, &(0x7f0000000000)=0x2ecc, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001600)='/dev/audio\x00', 0x400000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vfio/vfio\x00', 0x200000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001800)='/dev/midi#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x0, 0x8000}, 0x4000) syz_open_dev$sndctrl(0x0, 0x9b1, 0x80) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(0x0, 0x400, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) quotactl(0x3ff, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() sched_setattr(r5, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x5, 0x6, 0x100, 0x0, 0xffffffffffffc14d}, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x100000000004) r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r6, &(0x7f0000000400)="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", 0x200) sendfile(r6, r7, 0x0, 0xc700000e) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000006c0)=0x101, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e24}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, 0x0}, 0x40002102) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x82) 04:09:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") write$binfmt_aout(r0, &(0x7f0000000180)={{0x10f, 0x2, 0xe16, 0x2ac, 0x3ce, 0x4, 0x111, 0x7fff}, "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", [[], [], [], [], [], [], [], []]}, 0x1820) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x4000000000031, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f00000000c0)) 04:09:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x2, 0x0, [], 0x0}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x3, 0x7fffffff, &(0x7f0000000040)=0x3ff}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 04:09:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") write$binfmt_aout(r0, &(0x7f0000000180)={{0x10f, 0x2, 0xe16, 0x2ac, 0x3ce, 0x4, 0x111, 0x7fff}, "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", [[], [], [], [], [], [], [], []]}, 0x1820) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x4000000000031, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f00000000c0)) 04:09:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:26 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:27 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x20323}) 04:09:27 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd609e6f0c00042f00fe800000000000000000000000000000fe8000000000000000000000000000aa0000883e04019078007fe8f80002785fb36852a1b37f5d3fcb369b13a1607e4741d898d73eb58b6d7a751a7e00963fadcaf81afa8bc7448433a161356c238a95552b9afa40ead331d7f7a45e86ff7c6caa2616467334c50300b1209f3c1e9e4bd9d5d6fc13b4569feaac763aed2a3efca34d7f0c2af21f97fdaae07ed8cbc9f1e705f4308fbfbb1e9837f9d1098b8eb4282dfd774964a3dfb049fa14a2250f3ebdc68bbcb9584faae1c960e988c94e4811151b11f7d6d20881b1155ccdf7995a612cee5b91576fb2423bc7ad8638a2a413e2f3d7139d1f7e7fc028c2e7b900048e24b8d3bf08a9acd827222700cd6c2dfc6c97d8e65c270ec9adf49a8efc2c542d27"], 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x84a, 0x20200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000001c0)={0x20000000}) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000200)={0x4, 0x3, 0x100000000, 0x8, 0x39, 0x8001}) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000040)={0xfff, 0x80008, "43c56a4c0dfff6324309a4f14241d5e49efd5acd13368633", {0x3b1dfa34, 0xfffffffffffffffc}, 0xfffffffffffffff7}) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x7, 0x4) 04:09:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x800000000025) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) 04:09:27 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:27 executing program 5: r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79f9, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000140)=0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x109, 0x1, 0x6, "56317754ef9edaa59133a934c78bd968", "ff243e1e8a8f1dbd339d0b51891ee5b7f1caf1f63cb38c3ea0637d564deaa195696b08082157e277cf1a04039387b377ad87d5ad7d6ae6adb8d43518e982bd7bda8d3bf86eec923b7f7bdb67db251ffea8e124b462faf8cad5e5e99402e0ec9992ebfa82ef109a71090375e2bb7b96854633f89abcbe65f232985e51a9f8682556bc94fa392d1298c0eaa2e544c44f0b7f6ceb2ee11ab932a00905165d61b33353490b45cba562b33bbff5f25c9594dff5ef8cc069d1a2d8d95b9c8f1f4786f8e6893d53ce4a0799554a398ee0d2f40b08063f173ec559d3e5d20733dd768db75e1372d628fc22384e7a1c22d0375987c2159e29"}, 0x109, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40286608, &(0x7f0000000080)) fcntl$getflags(r0, 0x40b) sync_file_range(r1, 0x3, 0x9, 0x3) 04:09:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 04:09:27 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:27 executing program 5: syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x8100, 0xffffca88}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="b21fea707e90603b319313ab2f1d9abbc8320776ee2f6108aca959c63b3534b68607e95f926aed02ab0c0de5e6dcc0670b629eafefb9f11b4971c75f6494cc526dbdd14cf4b9303d61d248e509abfc712878284d19a44efb3dbb375194aaaa8ff19c762ea76cb99a0f1625c979f0623d6c2b6128eed7077120d38aac9a7e7a0882d7e9887f14f5b6f0b4e18d64c9170439d2b5e7d8ca627bbad5a360cdf223e4829dc4cbaa1f7127df30adf589f89cf6cabeae4e48d44c45485946bb2f97e9", 0xbf, r0}, 0x68) 04:09:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x800000000000, r0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000001c0)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000080)) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0xffffffffffff6688, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3cab, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, @perf_config_ext={0x1e}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x0, "b68912123a0e793b"}) 04:09:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x800000000025) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) 04:09:27 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:28 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x2000000, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x139) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000090000000d02"], 0x0) 04:09:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:28 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:28 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8100450000280000000000009078ac141400ac1423bb0e00907800002000"/54], &(0x7f00000002c0)={0x0, 0x4, [0x0, 0x7b4]}) [ 303.946666][ T590] Bluetooth: hci0: Frame reassembly failed (-84) [ 303.959257][ T9063] Bluetooth: hci0: Frame reassembly failed (-84) 04:09:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200000000000000000000800000ad3fe7eb2986d3da94d184e1cdf3d2c4478dfd44c45f35b6f1e0fc2d896e30369979c5469d78", 0x38, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 04:09:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:28 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x400000000000000, 0x0) mmap$xdp(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x1, 0x12, r0, 0x180000000) dup2(0xffffffffffffffff, 0xffffffffffffff9c) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) migrate_pages(0x0, 0x0, &(0x7f00000000c0)=0x7, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xffffffff) 04:09:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x7}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 04:09:28 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x5245, 0xfffffffffffff712) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = dup(r0) getsockname$netrom(r1, &(0x7f0000000280)={{0x3, @bcast}, [@null, @null, @remote, @rose, @netrom, @default, @bcast, @netrom]}, &(0x7f00000001c0)=0xfffffffffffffff7) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b787417da3f906eca82d070") personality(0x5000004) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x400443c9, 0x0) 04:09:28 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x5, &(0x7f00000027c0)=""/243, 0x500}}], 0x500, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20abe1fe016c0add, 0x0) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000e40), 0x4) 04:09:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 305.985007][ T7890] Bluetooth: hci0: command 0x1003 tx timeout [ 305.991185][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 308.065040][ T7890] Bluetooth: hci0: command 0x1001 tx timeout [ 308.071168][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 310.144998][ T7890] Bluetooth: hci0: command 0x1009 tx timeout 04:09:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x301000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 04:09:38 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x400000000000000, 0x0) mmap$xdp(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x1, 0x12, r0, 0x180000000) dup2(0xffffffffffffffff, 0xffffffffffffff9c) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) migrate_pages(0x0, 0x0, &(0x7f00000000c0)=0x7, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xffffffff) 04:09:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:38 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x5, &(0x7f00000027c0)=""/243, 0x500}}], 0x500, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20abe1fe016c0add, 0x0) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000e40), 0x4) [ 314.230804][ T9124] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.239104][ T2537] Bluetooth: hci0: Frame reassembly failed (-84) 04:09:38 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 04:09:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:38 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x007l\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'/62, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x12\x00'}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400190a20ffff7f0000000002113b850e1de0974881000000fe58a2bc4a03049164643e89000200de213ee23ffbf510040041fe", 0x38}], 0x1) r2 = dup2(r1, r0) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x74, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x7, @local, 0x9}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x20}, 0xfffffffffffffffc}, @in={0x2, 0x4e22, @rand_addr=0x7}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x80, @ipv4={[], [], @loopback}, 0x10000}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x80000001}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x9b}, &(0x7f0000000280)=0xffffffffffffffcb) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x1, 0x3}, &(0x7f0000000180)=0x8) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 04:09:38 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x5, &(0x7f00000027c0)=""/243, 0x500}}], 0x500, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20abe1fe016c0add, 0x0) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000e40), 0x4) 04:09:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='ip6_vti0\x00 \x00', 0xfd7a) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r2, &(0x7f00000000c0), 0x28, 0xe8030000, 0x0, 0xc9) request_key(0x0, 0x0, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 04:09:38 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) [ 316.305021][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 316.311193][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 318.385033][ T7890] Bluetooth: hci0: command 0x1001 tx timeout [ 318.391166][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 320.465012][ T22] Bluetooth: hci0: command 0x1009 tx timeout 04:09:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@updsa={0x154, 0x1a, 0x401, 0x0, 0x0, {{@in=@dev, @in6=@ipv4={[], [], @remote}}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x2}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@remote}}]}, 0x154}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}, 0x1e) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f00000000c0)=0x65dd) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 04:09:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 04:09:48 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f0000001240)=""/75, 0x4b}], 0x5, &(0x7f00000027c0)=""/243, 0x500}}], 0x500, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20abe1fe016c0add, 0x0) accept$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000e40), 0x4) 04:09:48 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(0xffffffffffffffff, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 04:09:48 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8907, 0x0) r1 = dup(r0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000000)=""/159, 0x9f}, {&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/231, 0xe7}, {&(0x7f0000001340)=""/216, 0xd8}, {&(0x7f0000001440)=""/237, 0xed}, {&(0x7f0000001540)=""/136, 0x88}, {&(0x7f0000001600)=""/22, 0x16}], 0xa, &(0x7f0000001880)=ANY=[@ANYBLOB="30000000000000001401000003000000", @ANYPTR=&(0x7f0000001700)=ANY=[@ANYBLOB='\x00'/40], @ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001740)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="0200000000000000580000000000000014010000070000000100000001000000", @ANYPTR=&(0x7f0000001780)=ANY=[@ANYBLOB="01000000ffffffff"], @ANYPTR=&(0x7f00000017c0)=ANY=[@ANYBLOB="e70d000000000000"], @ANYBLOB="09000000000000008c010006000000000700000000000000280c0000000000007c21000000000000400000000900000000001f00000001010000", @ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB='\x00'/61], @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001840)=ANY=[], @ANYBLOB="000000000000000008000000000000000600000000000000180000000000000014010000020000000100000003000000"], 0xe8, 0x881}, 0x8000) 04:09:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xe, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000940)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000044c0)={0x0, @loopback, @dev}, &(0x7f0000004500)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000004540)={@multicast2, @remote, 0x0}, &(0x7f0000004580)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000045c0)={@local, 0x0}, &(0x7f0000004600)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004640)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004780)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000004880)=0xe8) name_to_handle_at(r1, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000003c0)={0x5b, 0x3ff, "a1f25ebf4bc3cb8a5da7c5a9433e3c41aa7ce5f3f9e9f5465c9a572f20d293de305af59301990bbf983cb0cd990badaf367b1d44b2dca9bd3608140636f1a2ce5a15c7b4aea689ea0f2d74c2757c9a5f320272"}, &(0x7f0000000440), 0x400) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000004980)={@local, @rand_addr, 0x0}, &(0x7f00000049c0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004a40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004b40)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004b80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000005200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f00000051c0)={&(0x7f0000004bc0)={0x5ec, r2, 0x5, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x58, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x2, 0x6, 0x2}, {0x16dd, 0x100000000, 0x9ab9263, 0x1b1}, {0x9bb, 0x8, 0x20, 0xa000000000}, {0x2, 0x9, 0x6, 0x2}]}}}]}}, {{0x8, 0x1, r8}, {0x80, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x7, 0x8, 0x100000001, 0x100000001}, {0x3, 0x72effae1, 0x1, 0x7}, {0x6, 0x5, 0x0, 0x1}, {0x0, 0x3, 0x6, 0x7}, {0x10001, 0xfffffffffffff000, 0xfffffffffffffff7, 0x9cd}, {0x1, 0x80000001, 0x1, 0x95}, {0xffff, 0x8, 0x100000000}, {0x6, 0xfff, 0x81, 0x7480}, {0x1, 0x8, 0x1}]}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x23c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0xe8, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xa9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xa72}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7, 0xff, 0x7ff, 0x7f}]}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r16 = socket$unix(0x1, 0x1, 0x0) bind$unix(r16, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r16}}) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:09:48 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:48 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fchmod(r0, 0xc0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x0) ioctl$sock_SIOCINQ(r0, 0x89e2, 0x0) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f00000001c0)=""/181, &(0x7f0000000280)=0xb5) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000140)={0x8, 0x7f}) 04:09:48 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c660000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000010380000000000000000000000000000004000"/105], 0xfdef) [ 324.445498][ T8325] Bluetooth: hci0: Frame reassembly failed (-84) [ 324.453414][ T590] Bluetooth: hci0: Frame reassembly failed (-84) [ 324.467813][ T9168] Bluetooth: hci0: Frame reassembly failed (-84) 04:09:48 executing program 5: r0 = socket(0x42000000014, 0x5, 0xf35) getsockopt$sock_buf(r0, 0x1, 0x80000018, 0x0, &(0x7f00000000c0)=0xffffffffffffffc4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x60a, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x8000) 04:09:48 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x422c0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8000) r2 = fcntl$dupfd(r0, 0x0, r0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x6}, 0x1c) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000000)=0x80000000, 0x4) syz_emit_ethernet(0xd2, &(0x7f00000001c0)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) [ 324.623862][ T9204] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 326.475141][ T7891] Bluetooth: hci0: command 0x1003 tx timeout [ 326.481312][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 328.545031][ T22] Bluetooth: hci0: command 0x1001 tx timeout [ 328.551225][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 330.625128][ T7891] Bluetooth: hci0: command 0x1009 tx timeout 04:09:59 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4c200, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) prctl$PR_GET_SECCOMP(0x15) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x80000001, 0x4, 0x1, 0x4af5, 0xf, 0x8, 0x100000001, 0xffffffffffffffed, 0x20, 0x5, 0x5, 0xfffffffffffff800}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40000000000000) ioctl$TCSETA(r1, 0x8924, 0x0) 04:09:59 executing program 5: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0xfffffffffffffe5a, 0x0, 0x8, 0x0) 04:09:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) 04:09:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="66b80f0000000f23d00f21f86635000000000f23f866b87e13e8ab0f23c80f21f86635000070000f23f80f20590f73d600640f0766b93d0b00000f320fc72cb800008ec82e640f5a4700660f13890000", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000080)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:09:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(0x0, 0x0, 0x400) r3 = dup2(r0, r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xf7) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r4, 0x40}, &(0x7f0000000200)=0x8) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, &(0x7f0000000000)={r3, r3, 0x1}) openat$cgroup_ro(r2, &(0x7f0000000240)='cgroup.stat\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x484080, 0x0) 04:09:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, 0x0, 0x1, r3, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000037000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101200, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000300)=""/245) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:09:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x248c02) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000140)=0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x10007, 0x100000000000000a) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000200)={0x2, 0x6, "68b7086ef7f1654dec05f2dfc1f03b6074efa5d7d9ba18a2acdd9c6a18624372", 0x11, 0x11e, 0x7, 0x1, 0x13}) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000180), 0x4) 04:09:59 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:09:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x33e, 0x200007ff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffd51, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x9c00, 0x0, 0xa8]}}, 0x20) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x4142, 0x0) [ 336.784966][ T7890] Bluetooth: hci0: command 0x1003 tx timeout [ 336.791105][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 338.865008][ T7890] Bluetooth: hci0: command 0x1001 tx timeout [ 338.871186][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 340.945026][ T22] Bluetooth: hci0: command 0x1009 tx timeout 04:10:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.\x04\x00group/syz0\x00', 0x1ff) 04:10:09 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) listxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/2, 0x250) 04:10:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) 04:10:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:09 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x805, 0x0) sendfile(r3, r2, 0x0, 0x7) r4 = dup2(r3, r0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)=""/81) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) 04:10:09 executing program 3: syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x80, 0x0) 04:10:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x1000000efffffff, 0xe00000000000000, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="020d000510000000000000d30000000003000600252000000200046ac00200010000000001000000080012000200030000000000fa0000003000000002030000050000c6a8000000020000000008000092ab000000000001020014bb002000009ff6ffde0000000003000500002000000200ebf2df0000210008000002000000"], 0x80}}, 0x0) 04:10:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:09 executing program 5: getrandom(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8000000000000a, &(0x7f0000000180)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 345.011368][ T9285] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 345.025005][ C1] net_ratelimit: 6 callbacks suppressed [ 345.025014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 345.036448][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:10:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 345.133249][ T9285] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:10:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) geteuid() fcntl$getown(0xffffffffffffffff, 0x9) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpgid(0x0) lstat(&(0x7f00000019c0)='./file0\x00', 0x0) getgid() r2 = syz_open_dev$mice(0x0, 0x0, 0x0) write$P9_RSYMLINK(r2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001c80)) lstat(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4084) getpid() syz_open_procfs(0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 345.184962][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.190800][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:10:09 executing program 4: mkdir(&(0x7f0000001c40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$lock(r0, 0x6, &(0x7f0000027000)={0x1}) ftruncate(r0, 0x0) 04:10:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 347.024982][ T7891] Bluetooth: hci0: command 0x1003 tx timeout [ 347.031148][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 349.105012][ T7891] Bluetooth: hci0: command 0x1001 tx timeout [ 349.111166][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 351.185093][ T22] Bluetooth: hci0: command 0x1009 tx timeout 04:10:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) 04:10:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev}}, 0x0, 0x1, 0x0, "99d700aa4a4ffb66a45714dcf773743555195ac36510e723db33ae05662f9746b65303525b8bd6ec0cc6c87372e97283967119567369f1cf32714cc5af821145b14ededb4870db0615a346e21f3f8b07"}, 0xd8) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000414900000004fcff", 0x58}], 0x1) 04:10:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:19 executing program 5: getrandom(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8000000000000a, &(0x7f0000000180)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:10:19 executing program 3: unshare(0x8000400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 04:10:19 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCGETD(r0, 0x5424, 0x0) 04:10:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x1}, 0xff7f) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) 04:10:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x10001, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) [ 355.425029][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 355.430939][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:10:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 355.594964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.600802][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 357.265067][ T7890] Bluetooth: hci0: command 0x1003 tx timeout [ 357.271235][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 359.345074][ T7890] Bluetooth: hci0: command 0x1001 tx timeout [ 359.351415][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 361.425068][ T7890] Bluetooth: hci0: command 0x1009 tx timeout 04:10:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:10:29 executing program 4: r0 = memfd_create(&(0x7f0000000a00)='/d-\x1b\xb3\x82\xf9/J\xb0p*\xd8\x00\xea\x03\x83\xd8\x16\x88Qt\xceh\xeb\xb2\xc4\xfbf\xe1\xd5\xe5\x9aS\x964\xb5L/\xdb\xb4\xec\xd7C\xed\xcf\f\x01\x15\xae!T\x9eU\xee\xc6]3\xdb\xadx\x19\xf0w}y\x0f\xc3\xf2\xea;\x93\xe9\x13\x97E\xd8i\f6\xb6\xf9\\\xbd\xd1\\\x19\x0e\x93\x05\nC\x1b8)\xe3\x9b{\x8bT\x8a\xec\a\xc9-;\xf55n\xd1~\x7f\xa8eB\xc40&l\'a\x19\xdf\xad\x9aan\xaa\xc1h\x9e\x9a\xa94\xdcI{G\xf3\x00u\xfb\x83\xa2An\x1cN\x05w\xcb\x811A\x98G\x87j\x02\x8cC\xed#\xb8+\xf2G6\xe5\xe8\x88<2\x92\x13&\x96\xe6\xdbl\xb0\x99\x9eR/\xe8Q\xd3\xe9S0\xb9\xb0\'\xf5\x05\xecV}\x89Z\n\xc5.\xf5\xa7\xe1\x97\x9dq\xe8\xa6\x99\x9d8b\xd3\xd9\xbe\x02D\x13\x19b\x7fm2\xed\xa2\x04\x80\x12GM\x9dZ@=\xc9\x14\xf8\xdcb\x92@\xd1\xbb\xd2\xa331\x19\x8a\xc8:\xa1\xe6\xc2)nCl\xbdI\xe9\x8f\xe9\xc6\xdc\xf9Cq\xe26\xebX\xd6\xc2\xdb\xc4l\xf2J;2(\xef\xefH\x94b[\xf2\n~4r\xce\x02\x186\xc5\xe5\xc6\x1a\xa3\x9b\x1a\xcfNi\xf0Cb\"P\xfc\xebx$\x02\xca\xc7[J\xcb\x7f\x13\x9a\xbe\xac\x9e\x0eL!Xr\xc3\xa3\x85\x87\xa1\xa3\x10\x1bc\b\xddV\xa1\xed\xd1\x06p\xf1\x94\xba\x16|<\xc6\x0e\t\xe6W\x9d\xf2p\x8d\xd2\x98\xeb\xa3Tq\xaaP\xf5\x1b)\xce\xde\x87\x92{\xd4\x95,\x15\xed\x16\x96\x97\x8ae\xbc\xdc`|\xee1?\xefr\x86\x03\x80\x19\xcb5\x11\xf8\xc2\xd6\x1d-\x1e\xb4\xc3\xe5\x1f\xb4\xb8\xca0\xaa\x84H\xe2G\x11\x02\x8f\xb9\xa9L\x05\xac\xbc\x108\xf4\x89IW\x95\xd5\xfb\xd9_\xe4e\x10\x83\xa9N\xbe\xa6o\xe0r\"\x81-\xf9\xaeq\xa3\xe3\x1aN\xf5\\\x10\x821\xd5\x16\x90-\x84\x82v', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) msync(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x4) 04:10:29 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 04:10:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:29 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:29 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="4c0000001200ff09050000006fa283b724a600800000912f000000683540150024001d001fc41180b598bc593ab6821148a708de33a49868c62b2ca654a6613b6aa3f35d0f1c3e19e911bc88", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 04:10:29 executing program 3: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r0, 0x3, 0x9, 0x8001) fallocate(r0, 0x10, 0x5e89, 0xfff3) [ 365.418375][ T9383] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.439472][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:10:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 04:10:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 365.475263][ T9383] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.503192][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:10:29 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:29 executing program 3: r0 = creat(0x0, 0x8) readlinkat(r0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') sendfile(r1, r2, 0x0, 0x1) [ 365.527693][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 04:10:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 365.595234][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.637196][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.661561][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.674288][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.682695][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.692217][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.705417][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.718824][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.730013][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.745162][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.753699][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.763195][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.771372][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 365.780833][ T9395] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 365.789067][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 367.504959][ T7890] Bluetooth: hci0: command 0x1003 tx timeout [ 367.511135][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 369.584977][ T7887] Bluetooth: hci0: command 0x1001 tx timeout [ 369.591119][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 371.665001][ T7890] Bluetooth: hci0: command 0x1009 tx timeout 04:10:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:10:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x0, 0x0, 0x8001) fallocate(r1, 0x0, 0x5e89, 0xfff3) 04:10:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x30f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001700)=""/153, 0x99}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x16f, 0x0) 04:10:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x805, 0x0) sendfile(r3, r2, 0x0, 0x7) r4 = dup2(r3, r0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)=""/81) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) 04:10:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000007, 0x1000000032, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000008c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x5) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000040)) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 04:10:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = socket$kcm(0x29, 0x805, 0x0) sendfile(r3, r2, 0x0, 0x7) r4 = dup2(r3, r0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)=""/81) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) socket$packet(0x11, 0x0, 0x300) 04:10:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:40 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x30f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001700)=""/153, 0x99}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x16f, 0x0) 04:10:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x53, 0x400000002}], 0x2fc) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7, 0x800) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/49) 04:10:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 377.744969][ T22] Bluetooth: hci0: command 0x1003 tx timeout [ 377.751123][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 379.835008][ T7890] Bluetooth: hci0: command 0x1001 tx timeout [ 379.841123][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 381.905065][ T22] Bluetooth: hci0: command 0x1009 tx timeout 04:10:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, 0x0) 04:10:50 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x34feb) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x50000, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x101) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000280)={0x5e000000, 0x4004400}) 04:10:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x47010, r0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xd0dd, 0xfffffffffffffff8]) r1 = dup3(r0, r0, 0x80000) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000880), &(0x7f00000008c0)=0xc) connect$inet(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r3, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000000)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x7c) r5 = msgget(0x1, 0x288) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000700)=""/228) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0xb0, 0x0, &(0x7f0000000500)=[@exit_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000380)=[@ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x7, 0x1c}, @flat={0x77622a85, 0xb, r6, 0x1}, @fd={0x66642a85, 0x0, r4, 0x0, 0x1}], &(0x7f0000000400)=[0x38, 0x38]}, 0x7f}}, @enter_looper, @enter_looper, @free_buffer={0x40086303, r7}, @transaction={0x40406300, {0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000480), &(0x7f00000004c0)=[0x0, 0x18, 0x28, 0x18, 0x68, 0x28, 0x0]}}, @decrefs={0x40046307, 0x4}], 0xe8, 0x0, &(0x7f00000005c0)="9ac4d3fa3370c54ca6a1c485b535d9f0a463086df894d3916b6e6bf3b5c1da81054005eb378dd144ab7db8700ea40ed3dbafa638618d1575a46e55795b3c4f550df9e72d8308240ed9c7e48ee0f65a57acfb1fa8f9ce107345c5f672842786643cc1e17f91f765ec3c16fc48f2fd256e6451f682f41250a2fcbc461d104358a5ddb820f39e2162922bdc3640f57b8d06a58ab80f9458d8203b0d8f8660030449c197397703ea735e767ad6d8cc2614722dda233ea01a3624333027770b6ba1b0bd10fec9ade47cd47c095073c6e498b64e81978cbaffa17607a31f9ca33a09bc106a1db6fe799759"}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) getresgid(&(0x7f0000000840), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)) fchownat(r3, &(0x7f0000000480)='./file0\x00', r8, r9, 0x1c00) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r10, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xedd68b34208908df) 04:10:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:50 executing program 5: clone(0x20000004105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r1, 0x1, 0x10) r2 = gettid() getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@nl=@kern={0x10, 0x0, 0x0, 0x200024}, {&(0x7f0000000180)=""/5, 0x5}, &(0x7f00000001c0)}, 0xa0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4229, r2) ptrace$cont(0x3, r2, 0x0, 0xa05000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0x9, 0x40, 0x6}) 04:10:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000002100000127bd7000ffdbdf2502341408030000000f0000000800012008000f000000000008000200e000000108000200a91414aa"], 0x1}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000080)="795a75adae83ecd0ae61393d9c4a135e6bc0809cc4bf093cce20acdb0d8901300b347ba9b53b96f1a2cb158e13207808c6521ac7be352b") r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f00000002c0)=""/184, &(0x7f00000001c0)=0xb8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="c40f0000000000000000000000000000b40f00b715d24c8b50c4320ef3b64471ff00b9009c05bfdf91a5c2c439ed8b110207a2e52ac611123e7a03c6"], 0x1}], 0x1}, 0x0) syz_execute_func(&(0x7f0000000100)="470fe1d00f443c26c48145dcbf92330000c462a99304623d00100000470f71f40fc4a1c8565200c442fd8e9501000000408d93000000808f8860ec900000000064") setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 04:10:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:50 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:10:50 executing program 5: r0 = syz_open_dev$admmidi(0x0, 0xe2b, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000080)=0x1) r3 = memfd_create(&(0x7f0000001b40)='t\bnu\x00\x00\x00\x7f\x00\x00\x8c\x00\x10\x00\x00\x00\x00\x00\x00N\x1c\xc3\xfe\xc3.\x12\x1e\xcc\xf2\xd8\xd5l\x04~K8\xff\xe1S\xfa\xc1\xbb\x8bx\x9e\v\x83\xf6\xb2q[\xfd\xd8\x8b\x1d7\xcc\xe9\x82\xe8Y\xda\xec\x02sh5\x8d\x90J\xd0v\tu@\x13\x94\xd3\xe2\x8d\xec\x914\xcaKy\xe9K\x9cP\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa1\xff\x96\xec\xf8\xcaJH\xef\xfc\n.}\x0fnvI\x83\xa5\xfc\xd3\xe4(\xa7&\xab\xd2\xd5\x90\x87\xea\xddO\x1f\xff\x00\x00\x00\xdd\xb1\xc6\xae\x0f\xb6\xfcEq\xc3\xe6p\x95\xc7x\x91\x9c\xf4\x10W\xfd\xea\xb3|\xa1\xb0M\x06C\xf1\xb5\xc3\x8a\xaf\x1b\x98\xc9c6\x13\xa6\x94\x14', 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000100)={0x7, 0x1, 0x0, {0x0, 0x2, 0x3f, 0x8}}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) 04:10:50 executing program 3: io_setup(0x1, &(0x7f0000000100)) io_setup(0x9, &(0x7f00000002c0)) io_setup(0x80, &(0x7f0000000300)) io_setup(0x8, &(0x7f0000000340)) io_setup(0x1, &(0x7f0000000380)) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4000, 0x4) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000280)=0x60, 0x80800) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000500)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000740)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@loopback}}, &(0x7f0000000880)=0xe8) getresgid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000980)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000ac0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) r16 = memfd_create(&(0x7f0000000b80)='\x00', 0x7) r17 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r18 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000bc0)='cgroup.threads\x00', 0x2, 0x0) r19 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) r21 = socket$packet(0x11, 0x2, 0x300) r22 = open$dir(&(0x7f0000000c80)='./file0\x00', 0x800, 0x0) r23 = syz_open_dev$mice(&(0x7f0000000cc0)='/dev/input/mice\x00', 0x0, 0x400) r24 = syz_open_dev$binder(&(0x7f0000000d00)='/dev/binder#\x00', 0x0, 0x0) r25 = syz_open_dev$usbmon(&(0x7f0000000d40)='/dev/usbmon#\x00', 0x80000001, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000d80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000ec0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f0000000f40)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000f80)=0x0) r30 = geteuid() lstat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001080)=0x0) fstat(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001140)=0x0, &(0x7f0000001180), &(0x7f00000011c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001200)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001240)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000001340)=0xe8) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000001440)={0x0, 0x0}) r39 = getuid() r40 = getegid() r41 = getpgrp(0xffffffffffffffff) lstat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}) r43 = getgid() r44 = openat$vnet(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000003a00)={0x0, 0x80000, 0xffffffffffffffff}) r46 = syz_open_dev$rtc(&(0x7f0000003a40)='/dev/rtc#\x00', 0xffffffff, 0x400) r47 = gettid() r48 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003a80)={0x0, 0x0, 0x0}, &(0x7f0000003ac0)=0xc) r50 = getpid() fstat(0xffffffffffffffff, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0}) r52 = getegid() r53 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003b80)={0x0, 0x0}, &(0x7f0000003bc0)=0xc) lstat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r56 = getpgid(0x0) lstat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003d80)={0x0, 0x0, 0x0}, &(0x7f0000003dc0)=0xc) r59 = socket$vsock_dgram(0x28, 0x2, 0x0) r60 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003e00)={0xffffffffffffffff, 0x0, 0x8}, 0xc) ioctl$VIDIOC_DQBUF(0xffffffffffffff9c, 0xc0585611, &(0x7f0000003e80)={0x3ff, 0x0, 0x4, 0x10100, {0x0, 0x7530}, {0x7, 0x0, 0x7fff, 0xee, 0x41, 0xfff, "0d425afd"}, 0x7, 0x0, @planes=&(0x7f0000003e40)={0x1, 0x720, @fd=0xffffffffffffff9c, 0x6043}, 0x4}) r62 = socket$inet6_sctp(0xa, 0x5, 0x84) r63 = socket$inet6(0xa, 0x80004, 0x8000) r64 = socket$nl_xfrm(0x10, 0x3, 0x6) r65 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r66 = openat$random(0xffffffffffffff9c, &(0x7f0000007d00)='/dev/urandom\x00', 0x200, 0x0) r67 = inotify_init() r68 = epoll_create(0x81) r69 = syz_open_pts(0xffffffffffffff9c, 0x400200) r70 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000008080)='/dev/rfkill\x00', 0x40, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000080c0)={0x3, 0xffffffffffffffff, 0x1}) r72 = syz_open_dev$dmmidi(&(0x7f0000008100)='/dev/dmmidi#\x00', 0x4, 0x200) r73 = socket$caif_seqpacket(0x25, 0x5, 0x5) r74 = dup(0xffffffffffffffff) r75 = openat$vhci(0xffffffffffffff9c, &(0x7f0000008140)='/dev/vhci\x00', 0x400) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000008180)={0x0, 0x0}) r77 = getuid() stat(&(0x7f00000081c0)='./file0\x00', &(0x7f0000008200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r79 = socket$tipc(0x1e, 0x5, 0x0) r80 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) r81 = socket$packet(0x11, 0x2, 0x300) r82 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000008280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r83 = socket$rxrpc(0x21, 0x2, 0xa) r84 = dup(0xffffffffffffffff) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000082c0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008300)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000008400)=0xe8) lstat(&(0x7f0000008440)='./file0\x00', &(0x7f0000008480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000008500)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000008540)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000008640)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000008680)={0x0, 0x0, 0x0}, &(0x7f00000086c0)=0xc) r91 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f00000089c0)) r92 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000008a00)='/dev/snapshot\x00', 0x140, 0x0) r93 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000008a40)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r94 = socket(0x11, 0x80006, 0x0) r95 = syz_open_dev$swradio(&(0x7f0000008a80)='/dev/swradio#\x00', 0x1, 0x2) r96 = socket$nl_route(0x10, 0x3, 0x0) r97 = timerfd_create(0x1, 0x80000) r98 = accept(0xffffffffffffff9c, &(0x7f0000008ac0)=@hci, &(0x7f0000008b40)=0x80) r99 = syz_open_dev$mice(&(0x7f0000008b80)='/dev/input/mice\x00', 0x0, 0x80000) r100 = socket$nl_xfrm(0x10, 0x3, 0x6) r101 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000008bc0)='/proc/self/attr/current\x00', 0x2, 0x0) r102 = syz_open_dev$sndseq(&(0x7f0000008c00)='/dev/snd/seq\x00', 0x0, 0x0) r103 = openat$hwrng(0xffffffffffffff9c, &(0x7f000000d400)='/dev/hwrng\x00', 0x204000, 0x0) r104 = socket$tipc(0x1e, 0x7, 0x0) r105 = socket$nl_netfilter(0x10, 0x3, 0xc) r106 = accept4$inet(0xffffffffffffff9c, &(0x7f000000d440)={0x2, 0x0, @dev}, &(0x7f000000d480)=0x10, 0x80000) r107 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000d4c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f000000d5c0)=0xe8) stat(&(0x7f000000d600)='./file0\x00', &(0x7f000000d640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r110 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000ecc0)='/dev/sequencer\x00', 0x101040, 0x0) r111 = openat$rfkill(0xffffffffffffff9c, &(0x7f000000ed00)='/dev/rfkill\x00', 0x20300, 0x0) r112 = openat$vicodec0(0xffffffffffffff9c, &(0x7f000000ed40)='/dev/video36\x00', 0x2, 0x0) r113 = syz_open_dev$sg(&(0x7f000000ee40)='/dev/sg#\x00', 0x29e00000000, 0x1) r114 = inotify_init1(0xd41c09af87aa91ac) r115 = signalfd4(0xffffffffffffffff, &(0x7f000000ee80)={0x9}, 0x8, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f000000eec0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000ef00)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f000000f000)=0xe8) getgroups(0x1, &(0x7f000000f040)=[0x0]) sendmmsg$unix(r0, &(0x7f0000010780)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000140)="813c23b17ca29d70c4d7724a3b8df14deded318270d704108ad9fbf0579177d09b7283a48812e06d56551c31fbbfd0adb01208fe4710a015d1874f21bcf80ab932781a32099f23dcc2c9fd9ba525bbbf2a8e7880f8d9f5d3047646f360f52097b27d4d1afd23f184770e4728bdfe1d70fd05fc2c69ee9ad22ef9cacc6d43eafc7db148a6a31ce6fe8fc64df86135e153de0b6aed909d73a24bbf601f720718b61f37529f4c674d54adb020bbbd145b169811fe9f3fbfd710f29800c9330f67426eba67d7298a993435a4f2b919733c1dd55529db0f08700c4f", 0xd9}], 0x1, &(0x7f0000001480)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5, r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x38, 0x1, 0x1, [r16, r17, r18, r19, r20, r21, r22, r23, r24, r25]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}], 0x160, 0x80}, {&(0x7f0000001600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="aa9e323757e13d5edc2977cf92e87aa5b23791169de56f1da527165c9c69b50d8b707949b1307ddb1f5674ab9e73d8bd7e7117084817e397431aff7c8a4994cb67d944aadae8614bd2a055334d54ad1edd7cc4eba62a7a471a807d891f601291790bde595e1a14d483b968e65a9172375f16ce460756ca7804156765c16eb99ba7386f45bde95c086e93cdb9cf582248046b20e2", 0x94}], 0x2, 0xfffffffffffffffe, 0x0, 0x20000000}, {&(0x7f0000002780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="6e29775c378089ab5dc7f403d7b5de2517c1098021584f657adba808dfd5690339b1d1a95b1d9afa5c706421dc97e60858ab633c425ee007a222f9edf02794bb65cc12e769408d3c124e4bf990307cfbb21029577fdbb97e220db347fadf5ea5b373c8f4ace2e973ebc71cfbd7ce17629a6516a100e11eac3bc20afd8824ac25624d8a024c84e11a80d2443e45f098d0e4e165dea1b072b2d8f36e9e20e30e868678396f898eb10bd280761ab9e79b886453b350654a", 0xb6}], 0x2, &(0x7f0000007d40)=[@cred={0x20, 0x1, 0x2, r41, r42, r43}, @rights={0x20, 0x1, 0x1, [r44, r45, r46]}, @cred={0x20, 0x1, 0x2, r47, r48, r49}, @cred={0x20, 0x1, 0x2, r50, r51, r52}, @cred={0x20, 0x1, 0x2, r53, r54, r55}, @cred={0x20, 0x1, 0x2, r56, r57, r58}, @rights={0x30, 0x1, 0x1, [r59, r60, r61, r62, r63, r64, r65, r66]}], 0xf0}, {&(0x7f0000007e40)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000008040)=[{&(0x7f0000007ec0)="b950a5111f5d565dc53e21e3eb5a724e3a987486fedae0ad08281b16eec7127a0a378810b5149c25568e18213c620834fe6657424c86a030", 0x38}, {&(0x7f0000007f00)="8d5ba3540cf2658ccdba574172a4ed3b7e6ac94feb946147d23ee659ea6d237d06d75bf6a7d9cf9b23c20abaa66b4c52f99a7511624f4039016c1a39dee59cf16c98c07c9b77d5dccd1ebade0eb4dfe2e99e3daee1c899b124803b071efa0dc59fa54f1540efaa6dfd3c72f96033b85241f34dc0be142bffad6e4717ae1613c5bd3a84ab2a95426bbbdcde5c184188fe7c4121c0d6ddb8271b5afb6954db5f50059bf8f5ec5564cb", 0xa8}, {&(0x7f0000007fc0)="4674a2deee15944915e1ce92c8847f6a4a00a37cc751fa8987d96a9523a618cac672665abfaa31f7e2a696c793000fb0b554a364b75096725abb95915b6f4de96c96f6bfbb09a13ca574afb4f8832e8fda74f35ad239244d32447260f7fda9a82f82325c76ecfa05ab99df830ecf6a3180f62f3426468b", 0x77}], 0x3, &(0x7f0000008700)=[@rights={0x18, 0x1, 0x1, [r67, r68]}, @rights={0x30, 0x1, 0x1, [r69, r70, r71, r72, r73, r74, r75]}, @cred={0x20, 0x1, 0x2, r76, r77, r78}, @rights={0x18, 0x1, 0x1, [r79]}, @rights={0x28, 0x1, 0x1, [r80, r81, r82, r83, r84]}, @cred={0x20, 0x1, 0x2, r85, r86, r87}, @cred={0x20, 0x1, 0x2, r88, r89, r90}], 0xe8, 0x40000c0}, {&(0x7f0000008800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008980)=[{&(0x7f0000008880)="fbc61ca0107397b303843fccfb0e98e2fec13fceccf9fab71f801f0b03cbf523ba2d9074de12652eba0abc7b60b121241c51798014e92b72d84425fd53b2f71345f9681bd8c78a7092e1e01bf2bceb04918401b83f879244602a59fb807c77a7099d99964acb17da2a70a34fa2f37bb4aea69be3080c69d37be0a6de4162254bc9f4278924a865c117eb5fece594f4bada0bf8f2d2e8dbeeb52e02bcb3ff82c778b2f3faf7eec039ec840589034016352edd7e9978a1ad119a885fb757220e59def7", 0xc2}], 0x1, &(0x7f000000d6c0)=[@rights={0x18, 0x1, 0x1, [r91, r92]}, @rights={0x28, 0x1, 0x1, [r93, r94, r95, r96, r97]}, @rights={0x28, 0x1, 0x1, [r98, r99, r100, r101, r102]}, @rights={0x18, 0x1, 0x1, [r103]}, @rights={0x20, 0x1, 0x1, [r104, r105, r106]}, @cred={0x20, 0x1, 0x2, r107, r108, r109}], 0xc0, 0x4}, {&(0x7f000000d780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000ec40)=[{&(0x7f000000d800)="68a6dc66cf10c80b65ccdd7b0f5cf40f5af85efca2a91ff543cdc8aa0e1918479d7d5af8aac708f660639d6b3c23a547f9c72697dd5c7081201cd607bdd309d61b5aa99b44534f0c8c0d64804751a5cc7cec96bb059dd7e3fe389b6327e78a90e0", 0x61}, {&(0x7f000000d880)="533f26e17e6a4d394ef551bec391bdfd214a234781c74e238e4894b9ec239c6b2caeb9fef6b22472be65b60b1516d64230a0cba844d1c19b8681c98a1945863485269427a1d449", 0x47}, {&(0x7f000000d900)="dca94c6788a965b62e56adc15d9dc0db8bcf3f1675d92c8c51ea04fd0a94e4b02b067b0e5fb85470741b724ace7d7ffe85bf2039029061cc80d4ebe077631ff1cbae0489494e4f124b98cdbadb1e11be6a12da1b3e004f83fd635038b7c808aa64f211eb28f5d8f47830c6c174753b941b73a4513d5f45d705dd0f8d876bc4f4791372647e142a6c49d7059961175c24774cac913a00d89d77d4c4547913ec77596a3e83b405f4188c042dbb8c5bc9fcdaa65e75cd4514de4094371193b0f82fb70bdc3fffdf8e0ad1bd85efef515e76e3151a654a5f4011f5610c23556722a8e88db26642d369bfb9b2", 0xea}, {&(0x7f000000da00)="9dd465e44fefd9082e21ab832b7c1e88164536460ee5759334d665ecc0ed48dddeaff8b2ecead2e0c93014a1abd9b8757cc0d7780c792f8e75ec8fa0fa030de8f46a4ae7017998f3368fd52a2135a90e375baa2be5b260034f19907c81359984ad11c6807f372b2887cab2c41407aa42ca25dc757d479d129c74bbed82cc370bcd6baf6f1b2fbb", 0x87}, {&(0x7f000000dac0)="3b7d12953dae754517bd1a6e731091d5c29316936a0929f5c99456b93e1cbc3246b35fd44294edd8825ce405b2266a22fd6d7b6d942702857ad8c1101ae98415bd24f2d00b379cb8bd0c349ebd726fef33d48362ffbca2c9107754893638a9a697013220225b2c7403bedcdd41fd27bbb193", 0x72}, {&(0x7f000000db40)="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", 0x1000}, {&(0x7f000000eb40)="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", 0xfd}], 0x7, &(0x7f000000f080)=[@rights={0x28, 0x1, 0x1, [r110, r111, r112, r113, r114, r115]}, @cred={0x20, 0x1, 0x2, r116, r117, r118}], 0x48, 0x20040004}, {&(0x7f000000f100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000f580)=[{&(0x7f000000f180)="05769ce40ef8171600d95734f714841507a5e3e6b2aa41e1fdca41b87f305ff71e559f752ab693df4ff70f34944874e91e450c33fc9708f6209beec470108967f61cf0d6ce3efd15d29a07f83b36f23c46d38ac0954065ea887c8d9a0bf64dc1df176b5fdf1669bf9942d87285a07d0c7a22cb1e", 0x74}, {&(0x7f000000f200)="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", 0xfe}, {&(0x7f000000f300)="803b592c774b044a8f893e032971f4d638aecc131f0263ed636c4bcdbb37ddab3d960a1bdb54768e", 0x28}, {&(0x7f000000f340)="b610507079f9c0adfc030765f6e147d4625c4eadb9ecdd2de5922ecd67251e148a0549fd2bac73e16e69537ed275fddf8ba0648e6405fdf76818a8529719346868a1980b4731966e89721de87e518bd8a5066f", 0x53}, {&(0x7f000000f3c0)="51b7fd2d8a6d60a1e6ad44fe3c420fe67c4960b821c4cb4d67d005e4b5da871ad1e850f10730a79e2cca214fb47ecd638cd5901f7389b74d05b66c4eae1f7778d74d7fbda27e1d5120ce51652952491221a6d54d10f4ec4219bcfb52a90942899742df49513704f89caafb69c9a5d14aa4cf3321752500f3391a13b74984993d834d5fe497e00387fabbf1910988fb20906fed75ec3422909bbd3b9b3168", 0x9e}, {&(0x7f000000f480)="723d24a8695a0a5442190cb94caf45448f4652cd90bc62a2d9e9f7753af8f5875bb9f251c8440e", 0x27}, {&(0x7f000000f4c0)="78c50e46fcc54fb3850f3b4789f03da666038ff35722bc9569499a986f1c239cc5e24cec6952c235113f5dce305a1ee274313a8c6733453b4d22521e941a2285b150ec427fa5599953cb630a5e3197b552ec39372a21f316b319382f6ed95d45b8f17aa7429aeaa4aa1b1daf53baab3f5dd299aaca7f3a690203b7232ff988f169c72b764d80cb9047135e39e02b46d053458456c7c3dd4681a662f6d291c34db17101277570a8748682c7991ac3f5dd7eace526", 0xb4}], 0x7, 0x0, 0x0, 0x40}, {&(0x7f000000f600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000010700)=[{&(0x7f000000f680)="d3ecb2dd756c27197aa192566a1666445b3b43120ea5b0fb42035802ff232a6a20f7c6f4a8dd2a994a81517f554b1be7f1c2afe18c92e87b8dd53c93a1d783238ad5271d5d24ee8f8155f1c7fe89", 0x4e}, {&(0x7f000000f700)="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", 0x1000}], 0x2, &(0x7f0000010740), 0x0, 0x40000}], 0x8, 0x10) [ 387.985014][ T7890] Bluetooth: hci0: command 0x1003 tx timeout [ 387.991127][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 390.065047][ T7890] Bluetooth: hci0: command 0x1001 tx timeout [ 390.071165][ T8430] Bluetooth: hci0: sending frame failed (-49) [ 392.145068][ T7887] Bluetooth: hci0: command 0x1009 tx timeout 04:11:00 executing program 4: getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x0) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 04:11:00 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:11:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:11:00 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 04:11:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x7, 0x4, 0x9) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000000100)=""/186, 0xba}, {&(0x7f0000004800)=""/64, 0x40}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000001440)=""/144, 0x90}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/238, 0xee}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/238, 0xee}], 0x9}, 0x6}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000037c0)=""/171, 0xab}, {&(0x7f0000003880)=""/132, 0x84}, {&(0x7f0000003940)=""/160, 0xa0}, {&(0x7f0000003a80)=""/184, 0xb8}, {&(0x7f00000013c0)=""/1, 0x1}, {&(0x7f0000003b40)=""/93, 0x5d}, {&(0x7f0000003a00)=""/52, 0x34}], 0x7}, 0x6}, {{&(0x7f0000003c40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003cc0)=""/81, 0x51}, {&(0x7f0000003d40)}, {&(0x7f0000003d80)=""/114, 0x72}, {&(0x7f0000003e00)=""/44, 0x2c}, {&(0x7f0000003e40)=""/113, 0x71}], 0x5, &(0x7f0000003f40)=""/25, 0x19}, 0x4}, {{&(0x7f0000003f80)=@nfc_llcp, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/86, 0x56}], 0x1, &(0x7f00000040c0)=""/47, 0x2f}, 0xffffffff}, {{&(0x7f0000004100)=@caif=@rfm, 0x80, &(0x7f0000004240)=[{&(0x7f0000004180)=""/162, 0xa2}], 0x1, &(0x7f0000004280)=""/29, 0x1d}, 0x1}, {{&(0x7f00000042c0)=@caif=@dgm, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)=""/60, 0x3c}], 0x1, &(0x7f00000043c0)=""/19, 0x13}, 0x35e7db55}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004400)=""/26, 0x1a}, {&(0x7f0000004440)=""/112, 0x70}, {&(0x7f00000044c0)=""/110, 0x6e}], 0x3, &(0x7f0000004580)=""/167, 0xa7}, 0x1}], 0x7, 0x0, 0x0) 04:11:00 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 396.173256][ T9539] FAULT_INJECTION: forcing a failure. [ 396.173256][ T9539] name failslab, interval 1, probability 0, space 0, times 1 04:11:00 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0xfffffffffffffffe}}, 0x5c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r1, r2, 0x38, &(0x7f0000000100)={0x20, 0x400, 0x3}) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e20, @local}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x423, 0x3]}, 0x8) fcntl$setstatus(r0, 0x4, 0x4000) [ 396.240892][ T9539] CPU: 1 PID: 9539 Comm: syz-executor.1 Not tainted 5.1.0-rc6+ #82 [ 396.248845][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.258917][ T9539] Call Trace: [ 396.262385][ T9539] dump_stack+0x172/0x1f0 [ 396.266789][ T9539] should_fail.cold+0xa/0x15 [ 396.271418][ T9539] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 396.277314][ T9539] ? mark_held_locks+0xf0/0xf0 [ 396.282144][ T9539] __should_failslab+0x121/0x190 04:11:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) [ 396.287145][ T9539] should_failslab+0x9/0x14 [ 396.291709][ T9539] kmem_cache_alloc_node+0x56/0x710 [ 396.296971][ T9539] ? ldsem_down_read+0x33/0x40 [ 396.301863][ T9539] __alloc_skb+0xd5/0x5e0 [ 396.306214][ T9539] ? skb_trim+0x190/0x190 [ 396.310614][ T9539] bcsp_recv+0x8fb/0x13e0 [ 396.314951][ T9539] hci_uart_tty_receive+0x22b/0x530 [ 396.320205][ T9539] ? hci_uart_write_work+0x710/0x710 [ 396.325563][ T9539] tty_ioctl+0x4ed/0x15c0 [ 396.329920][ T9539] ? tty_register_device+0x40/0x40 [ 396.335069][ T9539] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 396.341367][ T9539] ? tomoyo_init_request_info+0x105/0x1d0 [ 396.347075][ T9539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.353311][ T9539] ? tomoyo_path_number_perm+0x263/0x520 [ 396.358944][ T9539] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 396.364779][ T9539] ? __fget+0x35a/0x550 [ 396.368924][ T9539] ? tty_register_device+0x40/0x40 [ 396.374073][ T9539] do_vfs_ioctl+0xd6e/0x1390 [ 396.378660][ T9539] ? ioctl_preallocate+0x210/0x210 [ 396.383830][ T9539] ? smack_file_ioctl+0x196/0x310 [ 396.388875][ T9539] ? smack_inode_rename+0x2d0/0x2d0 [ 396.394082][ T9539] ? tomoyo_file_ioctl+0x23/0x30 [ 396.399022][ T9539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.405316][ T9539] ? security_file_ioctl+0x93/0xc0 [ 396.410418][ T9539] ksys_ioctl+0xab/0xd0 [ 396.414563][ T9539] __x64_sys_ioctl+0x73/0xb0 [ 396.419313][ T9539] do_syscall_64+0x103/0x610 [ 396.423930][ T9539] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.426136][ T7] kasan: CONFIG_KASAN_INLINE enabled [ 396.429831][ T9539] RIP: 0033:0x458c39 [ 396.429863][ T9539] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.429872][ T9539] RSP: 002b:00007f8604bbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.429896][ T9539] RAX: ffffffffffffffda RBX: 00007f8604bbcc90 RCX: 0000000000458c39 [ 396.429905][ T9539] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000003 04:11:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:11:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x7, 0x4, 0x9) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000000100)=""/186, 0xba}, {&(0x7f0000004800)=""/64, 0x40}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000001440)=""/144, 0x90}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/238, 0xee}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/238, 0xee}], 0x9}, 0x6}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000037c0)=""/171, 0xab}, {&(0x7f0000003880)=""/132, 0x84}, {&(0x7f0000003940)=""/160, 0xa0}, {&(0x7f0000003a80)=""/184, 0xb8}, {&(0x7f00000013c0)=""/1, 0x1}, {&(0x7f0000003b40)=""/93, 0x5d}, {&(0x7f0000003a00)=""/52, 0x34}], 0x7}, 0x6}, {{&(0x7f0000003c40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003cc0)=""/81, 0x51}, {&(0x7f0000003d40)}, {&(0x7f0000003d80)=""/114, 0x72}, {&(0x7f0000003e00)=""/44, 0x2c}, {&(0x7f0000003e40)=""/113, 0x71}], 0x5, &(0x7f0000003f40)=""/25, 0x19}, 0x4}, {{&(0x7f0000003f80)=@nfc_llcp, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/86, 0x56}], 0x1, &(0x7f00000040c0)=""/47, 0x2f}, 0xffffffff}, {{&(0x7f0000004100)=@caif=@rfm, 0x80, &(0x7f0000004240)=[{&(0x7f0000004180)=""/162, 0xa2}], 0x1, &(0x7f0000004280)=""/29, 0x1d}, 0x1}, {{&(0x7f00000042c0)=@caif=@dgm, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)=""/60, 0x3c}], 0x1, &(0x7f00000043c0)=""/19, 0x13}, 0x35e7db55}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004400)=""/26, 0x1a}, {&(0x7f0000004440)=""/112, 0x70}, {&(0x7f00000044c0)=""/110, 0x6e}], 0x3, &(0x7f0000004580)=""/167, 0xa7}, 0x1}], 0x7, 0x0, 0x0) 04:11:00 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 396.435667][ T7] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 396.439212][ T9539] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 396.439221][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8604bbd6d4 [ 396.439230][ T9539] R13: 00000000004c3095 R14: 00000000004d6428 R15: 0000000000000004 [ 396.459434][ T9539] Bluetooth: Can't allocate mem for new packet [ 396.570404][ T7] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 396.577397][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.1.0-rc6+ #82 [ 396.586221][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.596380][ T7] Workqueue: events_unbound flush_to_ldisc [ 396.602187][ T7895] kobject: '0:45' (000000004eaebddf): kobject_uevent_env [ 396.602230][ T7895] kobject: '0:45' (000000004eaebddf): fill_kobj_path: path = '/devices/virtual/bdi/0:45' [ 396.609230][ T7] RIP: 0010:skb_put+0x35/0x1d0 [ 396.609243][ T7] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 b8 00 00 00 48 83 ec 08 e8 7c 18 fc fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4c [ 396.609249][ T7] RSP: 0018:ffff8880aa257b28 EFLAGS: 00010206 [ 396.609259][ T7] RAX: dffffc0000000000 RBX: ffff888095d1b340 RCX: ffffffff84f4f20a [ 396.609266][ T7] RDX: 0000000000000017 RSI: ffffffff85747474 RDI: 0000000000000000 [ 396.609274][ T7] RBP: ffff8880aa257b58 R08: ffff8880aa2461c0 R09: ffffed1015d05bc8 [ 396.609289][ T7] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: 0000000000000000 [ 396.630411][ T7895] kobject: '0:45' (000000004eaebddf): kobject_cleanup, parent (null) [ 396.643437][ T7] R13: 0000000000000001 R14: 00000000000000b8 R15: 0000000000000000 [ 396.643448][ T7] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 396.643454][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.643462][ T7] CR2: 00007f0a405be518 CR3: 0000000093fe4000 CR4: 00000000001406f0 [ 396.643470][ T7] Call Trace: [ 396.643496][ T7] bcsp_recv+0x9e2/0x13e0 [ 396.643516][ T7] hci_uart_tty_receive+0x22b/0x530 [ 396.643537][ T7] ? hci_uart_write_work+0x710/0x710 [ 396.650268][ T7895] kobject: '0:45' (000000004eaebddf): calling ktype release [ 396.657590][ T7] tty_ldisc_receive_buf+0x164/0x1c0 [ 396.657616][ T7] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.657633][ T7] tty_port_default_receive_buf+0x7d/0xb0 [ 396.657660][ T7] flush_to_ldisc+0x228/0x390 [ 396.667562][ T7895] kobject: '0:45': free name [ 396.673721][ T7] process_one_work+0x98e/0x1790 [ 396.673744][ T7] ? pwq_dec_nr_in_flight+0x320/0x320 [ 396.784102][ T7] ? lock_acquire+0x16f/0x3f0 [ 396.788790][ T7] worker_thread+0x98/0xe40 [ 396.793304][ T7] kthread+0x357/0x430 [ 396.797370][ T7] ? process_one_work+0x1790/0x1790 [ 396.802566][ T7] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 396.808807][ T7] ret_from_fork+0x3a/0x50 [ 396.813214][ T7] Modules linked in: [ 396.819126][ T7895] kobject: '0:44' (00000000e1d796f3): kobject_uevent_env [ 396.829166][ T7] ---[ end trace cf0f5770c6d405dd ]--- [ 396.834754][ T7] RIP: 0010:skb_put+0x35/0x1d0 [ 396.835230][ T7895] kobject: '0:44' (00000000e1d796f3): fill_kobj_path: path = '/devices/virtual/bdi/0:44' [ 396.839692][ T7] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 b8 00 00 00 48 83 ec 08 e8 7c 18 fc fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 4c 04:11:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x7, 0x4, 0x9) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000000100)=""/186, 0xba}, {&(0x7f0000004800)=""/64, 0x40}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000001440)=""/144, 0x90}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/238, 0xee}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/238, 0xee}], 0x9}, 0x6}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003bc0)=[{&(0x7f00000037c0)=""/171, 0xab}, {&(0x7f0000003880)=""/132, 0x84}, {&(0x7f0000003940)=""/160, 0xa0}, {&(0x7f0000003a80)=""/184, 0xb8}, {&(0x7f00000013c0)=""/1, 0x1}, {&(0x7f0000003b40)=""/93, 0x5d}, {&(0x7f0000003a00)=""/52, 0x34}], 0x7}, 0x6}, {{&(0x7f0000003c40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003cc0)=""/81, 0x51}, {&(0x7f0000003d40)}, {&(0x7f0000003d80)=""/114, 0x72}, {&(0x7f0000003e00)=""/44, 0x2c}, {&(0x7f0000003e40)=""/113, 0x71}], 0x5, &(0x7f0000003f40)=""/25, 0x19}, 0x4}, {{&(0x7f0000003f80)=@nfc_llcp, 0x80, &(0x7f0000004080)=[{&(0x7f0000004000)=""/86, 0x56}], 0x1, &(0x7f00000040c0)=""/47, 0x2f}, 0xffffffff}, {{&(0x7f0000004100)=@caif=@rfm, 0x80, &(0x7f0000004240)=[{&(0x7f0000004180)=""/162, 0xa2}], 0x1, &(0x7f0000004280)=""/29, 0x1d}, 0x1}, {{&(0x7f00000042c0)=@caif=@dgm, 0x80, &(0x7f0000004380)=[{&(0x7f0000004340)=""/60, 0x3c}], 0x1, &(0x7f00000043c0)=""/19, 0x13}, 0x35e7db55}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004400)=""/26, 0x1a}, {&(0x7f0000004440)=""/112, 0x70}, {&(0x7f00000044c0)=""/110, 0x6e}], 0x3, &(0x7f0000004580)=""/167, 0xa7}, 0x1}], 0x7, 0x0, 0x0) 04:11:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 396.853970][ T7895] kobject: '0:44' (00000000e1d796f3): kobject_cleanup, parent (null) [ 396.878717][ T3876] kobject: 'loop3' (000000006d13cc7d): kobject_uevent_env [ 396.888524][ T3876] kobject: 'loop3' (000000006d13cc7d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 396.899355][ T7895] kobject: '0:44' (00000000e1d796f3): calling ktype release [ 396.912112][ T3876] kobject: 'loop0' (00000000ac4caca8): kobject_uevent_env [ 396.915482][ T7] RSP: 0018:ffff8880aa257b28 EFLAGS: 00010206 [ 396.921742][ T7895] kobject: '0:44': free name [ 396.927572][ T7] RAX: dffffc0000000000 RBX: ffff888095d1b340 RCX: ffffffff84f4f20a [ 396.938335][ T7] RDX: 0000000000000017 RSI: ffffffff85747474 RDI: 0000000000000000 [ 396.946837][ T7] RBP: ffff8880aa257b58 R08: ffff8880aa2461c0 R09: ffffed1015d05bc8 [ 396.955034][ T7] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: 0000000000000000 04:11:01 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 396.958785][ T3876] kobject: 'loop0' (00000000ac4caca8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 396.969078][ T7] R13: 0000000000000001 R14: 00000000000000b8 R15: 0000000000000000 [ 396.981816][ T7] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 396.991329][ T3876] kobject: 'loop5' (0000000019b94947): kobject_uevent_env [ 397.008198][ T3876] kobject: 'loop5' (0000000019b94947): fill_kobj_path: path = '/devices/virtual/block/loop5' 04:11:01 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 04:11:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f00000003c0)=""/247, 0xf7, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 397.031907][ T3876] kobject: 'loop2' (00000000845975a8): kobject_uevent_env [ 397.035014][ T7889] kobject: 'loop4' (0000000057d26bba): kobject_uevent_env [ 397.039173][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.056681][ T3876] kobject: 'loop2' (00000000845975a8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 397.061165][ T7889] kobject: 'loop4' (0000000057d26bba): fill_kobj_path: path = '/devices/virtual/block/loop4' 04:11:01 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0xfffffffffffffffe}}, 0x5c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) rt_tgsigqueueinfo(r1, r2, 0x38, &(0x7f0000000100)={0x20, 0x400, 0x3}) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e20, @local}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x423, 0x3]}, 0x8) fcntl$setstatus(r0, 0x4, 0x4000) [ 397.067395][ T7] CR2: 0000001b30923000 CR3: 00000000960e7000 CR4: 00000000001406f0 [ 397.105532][ T3876] kobject: 'loop5' (0000000019b94947): kobject_uevent_env [ 397.119570][ T7] Kernel panic - not syncing: Fatal exception [ 397.125042][ T3876] kobject: 'loop5' (0000000019b94947): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 397.136656][ T7] Kernel Offset: disabled [ 397.140980][ T7] Rebooting in 86400 seconds..