0x81, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r7, r6) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x8) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfe) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:36 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000001c0), 0x4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x2, 0x31, &(0x7f0000ffc000/0x4000)=nil, 0xffffffff}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat6\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)=0x3) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000100)=0x800) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="27169ed6ebb70f8f508e16160ba20000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES16=r11, @ANYRES64=r10/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$can_raw(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r9}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x3, 0x0, 0x1, 0x1}, 0x31, 0x2, 0x0, 0x0, "019a90cb74a2c91626308435527cc5d67c9e4beaea914a9b6ce09b596dc7a4f153d989d5eef25b2cde916f96d56cf1189ace492e2a35dd41fbeabcfd4a91d39f"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20010044) 04:54:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00') 04:54:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x28d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x2a) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8000000000000008, 0x8130f49fffe0fd3f) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r9, r7) openat$nvram(0xffffffffffffff9c, 0x0, 0x50001, 0x0) 04:54:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xffffffffffffffd9) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udp\x00') r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) fcntl$dupfd(r2, 0x406, r7) r8 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_GET_MAGIC(r8, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x4) close(0xffffffffffffffff) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 861.850644] net_ratelimit: 15 callbacks suppressed [ 861.850662] protocol 88fb is buggy, dev hsr_slave_0 [ 861.861045] protocol 88fb is buggy, dev hsr_slave_1 04:54:36 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080), 0x4) 04:54:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x23c380, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 862.160103] protocol 88fb is buggy, dev hsr_slave_0 [ 862.165213] protocol 88fb is buggy, dev hsr_slave_1 [ 862.170350] protocol 88fb is buggy, dev hsr_slave_0 [ 862.175420] protocol 88fb is buggy, dev hsr_slave_1 04:54:36 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000040)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x0, 0x0) 04:54:37 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REG_RULES={0x24, 0x22, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000801}, 0x1) sendto$phonet(r0, &(0x7f0000000040)="074868d387b73f28e5737faef01657ced132bd83120f0ef5d0d6310325ad12aa320259a29299b544ae1c8cd3e72bc1d4a4e69544197ccff12cd12ff29dad9aff1d3d28c275115b95e7aeb86694075b0fd3f8d2a26fadb5edd99d9998f28692cf8cbe181fb89df45eeada2c85ddec2824889fadba901bbd08919f72dddc943a50f0bee380153b6a5547ff6505ba4d38e30606878d9248728567d6b25c296d3ed554498836cd5661aa8eed3f5da137c3e5668ab2f144f6", 0xb6, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x2a0541) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20880, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x60, 0xf6, &(0x7f0000000240)="058966798c9b6a39c5f1490ff22a3442f91f2d42f1ed19a443f140a2050f22712effbadd556ba2a6d0781fde42f7ef4ed401ade55a6c48928c4713ca8265c8b6f8d66735c7f7aad48abb949b3ececd39003b873a16c301ac636f4c28fe7034e2", &(0x7f0000000340)=""/246, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="9b82", &(0x7f0000000540)}, 0x40) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x5, 0x3, 0x100, 0x0, 0xd, 0x4, 0x5}, &(0x7f00000000c0)=0x9c) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6420180}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fedbdf250800000014000600627269641e655f736c6176655f310000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004801) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x10, 0x3, @dev={0xfe, 0x80, [], 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}]}, 0xff4f}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)=0x9) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x80, 0x0) 04:54:37 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffffffffffed9}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffdf5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x17) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000000, 0x300) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:37 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200000, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) 04:54:37 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r5, &(0x7f0000001000/0x1000)=nil, 0x6000) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:37 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) dup2(r1, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r5, r4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 862.960136] protocol 88fb is buggy, dev hsr_slave_0 [ 862.965288] protocol 88fb is buggy, dev hsr_slave_1 04:54:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x28d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x2a) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8000000000000008, 0x8130f49fffe0fd3f) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r9, r7) openat$nvram(0xffffffffffffff9c, 0x0, 0x50001, 0x0) 04:54:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x400080) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/153, 0x99}, {&(0x7f0000001180)=""/251, 0xfb}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001300)=""/18, 0x12}, {&(0x7f0000001340)=""/188, 0xbc}, {&(0x7f0000001400)=""/178, 0xb2}], 0x9) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:54:37 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 863.520113] protocol 88fb is buggy, dev hsr_slave_0 [ 863.525287] protocol 88fb is buggy, dev hsr_slave_1 04:54:38 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x20000) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640), &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r2, 0xffff, 0x9, [0x7f, 0x3f, 0x82, 0x1, 0x9, 0xa3a7, 0x8, 0x1, 0x6]}, &(0x7f00000000c0)=0x1a) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0xffffffff}, &(0x7f0000000140)=0x8) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x9, 0x0, 0x3, 0x400000000000, 0x10000000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x21, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x4040dc) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:38 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2, 0x1000}, 0xffffffffffffff0d) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) accept4$netrom(r4, &(0x7f0000000300)={{}, [@null, @default, @default, @default, @bcast, @null, @remote, @default]}, &(0x7f0000000140)=0x48, 0x800) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000000000028) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r7, r6) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x90000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='{\x00') 04:54:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x100000200000, 0x800) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2040, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={r4, r5/1000+30000}, 0x10) 04:54:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = getpgrp(0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) tgkill(r1, r2, 0x11) 04:54:39 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[], 0x2f}, 'netpci0\x00'}}, 0x1e) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) 04:54:39 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpgrp(r0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x28d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x2a) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8000000000000008, 0x8130f49fffe0fd3f) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r9, r7) openat$nvram(0xffffffffffffff9c, 0x0, 0x50001, 0x0) 04:54:39 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000200)={0xffffffff, 0xfffffffffffffffb}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) lseek(r3, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) write(r5, &(0x7f0000000240)="23d1c2f9dcf1735ed4e2ef5adc242b0968560f922aa7d7fce152abb159efd1830521502a77edc9caa98a90acd26b10396b9e1d8c915ee0f268e78bda45a8130054b7d3c9940be09b93af10381e3d3c60e9c19078a5af6944a71bf0d7963129de27fac34dc14fe6575c9726b472e67746524e82d2ce47e2dd4d376ba283a35e33e1841db6bb1acf99be3ebab72e57c4329a83cff1384a966daf4aa812ba7141c1b51e863906640a0ba5cece0fe70ee80fe4b15d3867b8086dfa0828c28ec3229f08c0dc251466284eea7cb2a3a0f1f11c", 0xd0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:39 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000140)={0x9d0000, 0x9, 0x8, r6, 0x0, &(0x7f0000000100)={0x9b0954, 0x2d056cc8, [], @string=&(0x7f00000000c0)}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xbc, 0x20, &(0x7f0000000040)}) 04:54:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x402) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:54:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7ff, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x32) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x100) creat(&(0x7f0000000140)='./bus\x00', 0x200) 04:54:39 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x7f, 0x1, 0x2, 0x0, 0x1ff, 0x2980, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x7fbbfcd26ef0d2}, 0xa000, 0x0, 0x7, 0x5, 0x41c5, 0x81, 0x4}) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0xf000, 0x102000}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r4, 0x1000, 0x2) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:40 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x8}, 0x8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:40 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x40000) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x80000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:40 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000000c0)='bond_slave_0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:41 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2, 0x1000}, 0xffffffffffffff0d) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:41 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x880bc) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000100)={0x268, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0xf0ffff}, [@typed={0x254, 0x100000001}]}, 0x268}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r8, r7) openat$nvram(0xffffffffffffff9c, 0x0, 0x381000, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 04:54:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x100000, r3}) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={0x0, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r5, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:41 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:41 executing program 3: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x96, 0x7, 0x4, 0x20, 0xffffff00, {0x77359400}, {0x3, 0x1, 0x6, 0xd1, 0x20, 0x0, "c0401bd6"}, 0x10000, 0x3, @fd=r0, 0x2, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x48) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x14000) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) 04:54:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x20000) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000500)=""/177) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) write$binfmt_elf64(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4af) [ 867.120145] net_ratelimit: 16 callbacks suppressed [ 867.120150] protocol 88fb is buggy, dev hsr_slave_0 [ 867.130197] protocol 88fb is buggy, dev hsr_slave_1 04:54:41 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e23, @loopback}}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f00000000c0), 0x0, 0xe) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x30) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffc00000000, 0x628140) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:42 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x402810, 0x0) socket(0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) socket(0x0, 0x0, 0x0) creat(0x0, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="388125a83d6729036656669ff988e015405d2ab14939060ecd3fea768c8e20d35f49cf8e00c9f24c02a64b94d53c05022a82ffbe217fba1858f770d782840784b9e6a8ec6010876718b9f27e2382d8330d3326d8327006402d2e5a087fed84bef9c665ba140d5f7101e4afa8df7bd0e3f1d59b979a5e6e3dd9d7cc2f779c1e1ee4ee2fea9d8d66bc7beea08e24a97050c1dc00da7fb3b8e60c44498f7be7c4191ecd41414b45aed9ea843f9aa37bf34e7b746fa13f4775f2f080bc4dd41ca2f5521f244c27d4332ebf19605fcc1f2c27502f0859e99f16b199b448e0f05fb32f114d2bf7d47c0e6d57bae666a60d72dc30fb12327fa6e8f8a9ce8d3a101113c9") lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:54:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x224a02, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) fcntl$setpipe(r5, 0x407, 0x2e) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r8, r7) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 867.680441] protocol 88fb is buggy, dev hsr_slave_0 [ 867.685539] protocol 88fb is buggy, dev hsr_slave_1 04:54:42 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r5, &(0x7f0000001000/0x1000)=nil, 0x6000) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x400400) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000080)={0x5cb, 0x7}) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x3000002, 0x40010, r1, 0x83000000) 04:54:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x6, 0x4, 0x1, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f0000000300)=@tipc=@id, 0x80, &(0x7f0000001500)=[{&(0x7f0000001600)=""/254, 0xfe}, {&(0x7f00000015c0)=""/56, 0x38}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000240)=""/25, 0x19}], 0x6}, 0x7f}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:42 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x58, 0xc, 0x6, 0x4, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 868.080121] protocol 88fb is buggy, dev hsr_slave_0 [ 868.085354] protocol 88fb is buggy, dev hsr_slave_1 [ 868.145635] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 04:54:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(r0, &(0x7f00000001c0)='autogroup\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 868.248313] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 868.255812] CPU: 0 PID: 13352 Comm: syz-executor.3 Not tainted 4.14.163-syzkaller #0 [ 868.263721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.273085] Call Trace: [ 868.275690] dump_stack+0x142/0x197 [ 868.279334] warn_alloc.cold+0x96/0x1af [ 868.283323] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 868.288188] ? wait_for_completion+0x420/0x420 [ 868.292789] __alloc_pages_slowpath+0x23c6/0x2930 [ 868.297656] ? warn_alloc+0xf0/0xf0 [ 868.301304] ? __might_sleep+0x93/0xb0 [ 868.305206] __alloc_pages_nodemask+0x62c/0x7a0 [ 868.309888] ? rcu_read_lock_sched_held+0x110/0x130 [ 868.314917] ? __alloc_pages_slowpath+0x2930/0x2930 [ 868.319957] alloc_pages_current+0xec/0x1e0 [ 868.324293] kvm_mmu_create+0xdf/0x1e0 [ 868.328192] kvm_arch_vcpu_init+0x29c/0x8e0 [ 868.332528] kvm_vcpu_init+0x272/0x360 [ 868.336431] vmx_create_vcpu+0xfc/0x2aa0 [ 868.340536] ? mutex_trylock+0x1c0/0x1c0 [ 868.344619] ? handle_rdmsr+0x6e0/0x6e0 [ 868.348604] ? wait_for_completion+0x420/0x420 [ 868.353200] kvm_arch_vcpu_create+0x8c/0xc0 [ 868.357563] kvm_vm_ioctl+0x501/0x1600 [ 868.361468] ? __lock_acquire+0x5f7/0x4620 [ 868.365711] ? get_unused_fd_flags+0xd0/0xd0 [ 868.370138] ? kvm_vcpu_release+0xa0/0xa0 [ 868.374295] ? trace_hardirqs_on+0x10/0x10 [ 868.378545] ? trace_hardirqs_on+0x10/0x10 [ 868.382787] ? __might_fault+0x110/0x1d0 [ 868.386857] ? save_trace+0x290/0x290 [ 868.390662] ? __might_fault+0x110/0x1d0 [ 868.394730] ? __fget+0x210/0x370 [ 868.398197] ? find_held_lock+0x35/0x130 [ 868.400125] protocol 88fb is buggy, dev hsr_slave_0 [ 868.402262] ? __fget+0x210/0x370 [ 868.402279] ? kvm_vcpu_release+0xa0/0xa0 [ 868.402292] do_vfs_ioctl+0x7ae/0x1060 [ 868.402306] ? selinux_file_mprotect+0x5d0/0x5d0 [ 868.402319] ? lock_downgrade+0x740/0x740 [ 868.407371] protocol 88fb is buggy, dev hsr_slave_1 [ 868.410757] ? ioctl_preallocate+0x1c0/0x1c0 [ 868.410769] ? __fget+0x237/0x370 [ 868.410785] ? security_file_ioctl+0x89/0xb0 [ 868.410798] SyS_ioctl+0x8f/0xc0 [ 868.415000] protocol 88fb is buggy, dev hsr_slave_0 [ 868.418801] ? do_vfs_ioctl+0x1060/0x1060 [ 868.423629] protocol 88fb is buggy, dev hsr_slave_1 [ 868.427707] do_syscall_64+0x1e8/0x640 [ 868.466351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 868.471213] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 868.476410] RIP: 0033:0x45af49 [ 868.479599] RSP: 002b:00007f8e000f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.487313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 868.494616] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 868.501898] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 868.509298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e000f36d4 [ 868.516577] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 868.535003] Mem-Info: [ 868.537596] active_anon:847250 inactive_anon:1741 isolated_anon:0 [ 868.537596] active_file:4451 inactive_file:5433 isolated_file:15 [ 868.537596] unevictable:0 dirty:43 writeback:5 unstable:0 [ 868.537596] slab_reclaimable:15642 slab_unreclaimable:127258 [ 868.537596] mapped:60049 shmem:1786 pagetables:27869 bounce:0 [ 868.537596] free:488919 free_pcp:327 free_cma:0 [ 868.578253] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 868.609796] Node 1 active_anon:1506908kB inactive_anon:64kB active_file:17804kB inactive_file:21728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25088kB dirty:168kB writeback:20kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 868.689758] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.721712] lowmem_reserve[]: 0 2569 2569 2569 2569 04:54:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 868.726988] Node 0 DMA32 free:29984kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:528kB local_pcp:188kB free_cma:0kB 04:54:43 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETXF(r6, 0x5434, &(0x7f00000000c0)={0x5, 0x1000, [0x1, 0x1, 0xffff, 0xeb, 0x7], 0x1ff}) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 868.823735] lowmem_reserve[]: 0 0 0 0 0 [ 868.827928] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:54:43 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) shmat(r5, &(0x7f0000001000/0x1000)=nil, 0x6000) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 868.935737] lowmem_reserve[]: 0 0 0 0 0 [ 868.949061] Node 1 Normal free:1915668kB min:53508kB low:66884kB high:80260kB active_anon:1506908kB inactive_anon:64kB active_file:17804kB inactive_file:21728kB unevictable:0kB writepending:392kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20352kB pagetables:46848kB bounce:0kB free_pcp:1240kB local_pcp:636kB free_cma:0kB 04:54:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x3d, 0x1, 0x4, 0x400, 0x5, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 869.112857] lowmem_reserve[]: 0 0 0 0 0 [ 869.122346] Node 0 DMA: 1*4kB (U) 8*8kB (UEH) 15*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB [ 869.139286] Node 0 DMA32: 26*4kB (MH) 67*8kB (UME) 799*16kB (UM) 514*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29936kB [ 869.153314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 869.164611] Node 1 Normal: 260*4kB (UME) 166*8kB (UME) 140*16kB (UME) 43*32kB (UME) 31*64kB (UME) 18*128kB (M) 13*256kB (M) 8*512kB (M) 6*1024kB (ME) 2*2048kB (ME) 461*4096kB (M) = 1916192kB [ 869.195602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 869.213959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 869.232865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 869.262144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 869.297095] 11695 total pagecache pages [ 869.314140] 0 pages in swap cache [ 869.328233] Swap cache stats: add 0, delete 0, find 0/0 [ 869.341623] Free swap = 0kB [ 869.348123] Total swap = 0kB [ 869.354662] 1965979 pages RAM [ 869.361286] 0 pages HighMem/MovableOnly 04:54:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r5, r4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x23, 0x1a6273f2b2e289f7, 0xb) creat(0x0, 0x0) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 869.386866] 335871 pages reserved [ 869.400259] 0 pages cma reserved 04:54:44 executing program 3: r0 = socket(0x1a, 0x800, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x20, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x40000000000000}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0xe}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_gt={'euid>', r1}}]}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) 04:54:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20000) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e22, 0xffff, @loopback, 0x2}}}, 0x84) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000500), 0xfffffffffffffc5b}, {&(0x7f0000000300)="bb623a03eb4c36d7a271fe3b58794f4b93fce8cf7f02b261ef9df3da42e29a10ec78ad03bdbce90ba58dc2e2ac69a9c07b5a2ca395de683efd8a7547d2d4987b238a4c4e8eef668253094f90d60cae7e8160c9040851cf7587f98f4eeefa70b2e07809aa3d91c512afea04504a401192a0863b5753e49362354990786674f18e4b52486f890cadf1"}, {&(0x7f00000013c0)="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", 0x5b}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x48ddb8adef6c46c4) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x4080) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x480eb26a8b005105, 0x0) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x800, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000200)) close(r1) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x585402) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:44 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffff, 0x80400) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r5, r4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000140)='./bus\x00', 0x90533b58aec0c659) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) lseek(r8, 0xe3, 0x1) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x4000, 0x0) r3 = fanotify_init(0x1, 0x8000) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r1, 0x2008}, {r2, 0x4080}, {r3, 0x1}, {r4, 0x100}, {r0}, {r0, 0x8}, {r5, 0x4480}, {r6, 0x1000}, {r7, 0x81}], 0x9, &(0x7f0000000140)={r8, r9+30000000}, &(0x7f0000000180)={0xffffffffffffffff}, 0x8) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x3) r7 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) io_setup(0x51, &(0x7f00000001c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@migrate={0x7c, 0x21, 0x4, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e21, 0x6, 0x2, 0x20, 0x20, 0x3b, r3, 0xee01}, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd26, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x8, [0x8, 0x1f, 0x4, 0x7]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004c840}, 0x44) 04:54:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x387bc578) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x9, 0xc, 0x4, 0x1000, 0x8, {r4, r5/1000+30000}, {0x4, 0x1, 0x80, 0x8, 0x0, 0x5, "5203dbbc"}, 0x1, 0x3, @planes=&(0x7f00000001c0)={0x401, 0x9, @userptr=0x401, 0x5c7}, 0x7fff, 0x0, r6}) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r10, r9) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x4b) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:45 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10) r13 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r13, 0x0, 0xcb, &(0x7f0000000000), 0x10) r14 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r14, 0x0, 0xcb, &(0x7f0000000000), 0x10) r15 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r15, 0x0, 0xcb, &(0x7f0000000000), 0x10) r16 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r16, 0x0, 0xcb, &(0x7f0000000000), 0x10) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC=r16, @ANYRES32=r8, @ANYRES32=r9, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r10, @ANYRESDEC=r11], @ANYRES32=r12, @ANYRESOCT, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYPTR]], @ANYRES32=r13, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r14, @ANYPTR64, @ANYRES16=r11], @ANYBLOB="243eabd37b8d17066a01a28a23b8ae0af735258777a39bf528c59c75cca3b206e2e2fde0cfd2cd1398b21fa0d9eb6db08a2fa558c2cfe568c56233a656f34e4c7f23bb552d66a9bf31f79f798d67dffa6a35c8a93eee9a1b6ad166721802eea33512538b92b32553e1df6bdd93280f4c02c5e036263e66f603d628d9c096ce0abf519e4222bcdfef6162a93da00fa21f4d96086a73473bccb1371ab8c41d8205a3172fce0ce83777ce77552b4c94ea6d5afe883c7b0a6117d303d0576fe7c9e884e71842963b5add06ae4822d67863ba15f665bbcd398d3fce5dbed86657ac75f094", @ANYRES32, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="78bb8baf38f22e5745155a553c71461534bb2a5638e066e1af59cb77e219b380128fda05dae0275d1aaaa0fe2a59203179bf4a69d789a29fa242edadcde7380b626c4eff8f6da6a80bb495c48d6d82a8aaabd1da34e413d30fba1331002794e5ace907d66f103610e9394ee994af5dd0dd8e5450b58089fcffd8f1b7a26535a7c9a9bb341c1e08c59f1fb3a4f80c21b004eb33e26ec226608d4f793bd1d0f03f9c7747bb16ca", @ANYRESOCT=r15], @ANYRESDEC, @ANYRES64, @ANYRES64]], 0xfffffffffffffdbd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000240)='./bus\x00', 0x13) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r7 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="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", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:46 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x400, 0x105000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x2, 0x5, 0x0, 0x265}) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x20000000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x82) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000400)={0x7f, 0x8, 0x671f, 0x2, 0x9, 0xffff}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000200)=0x0) process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000080), 0x4) r7 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) r8 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f0000000640)={r9, 0x4, &(0x7f0000000540)=[0x1, 0x7fff, 0x400, 0xb7c], &(0x7f0000000580)=[0x3ff, 0xfffffffb, 0x1000, 0x1], 0x4, 0x9, 0xffff, &(0x7f00000005c0)=[0x8, 0x7, 0x1d, 0x20, 0x3f, 0x1, 0x4cbc, 0x8, 0x200], &(0x7f0000000600)=[0x1, 0x23e, 0x3c0, 0x8, 0x8, 0x5, 0xfff]}) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f00000001c0)=0x1) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 04:54:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x6, 0x6}, 'port1\x00', 0x6, 0x810a0, 0xbc, 0x80000001, 0x81, 0x7, 0x8, 0x0, 0x3, 0x20}) 04:54:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x2, 0x24e7}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x0, r3}) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000180)={0x2, 0x3}) 04:54:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r7, r6) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) sendfile(r1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) lseek(r7, 0x6ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r9, r8) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r10 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8) r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0) r13 = accept4$alg(r10, 0x0, 0x0, 0x100000) r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r9], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbac0638998b876e7ce2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f390f008b04123721ba1ac522b840c781d18034498f577b0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = dup(r1) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[&(0x7f0000000040)="203d60ba16003262038021e301f4231071612214dd1b213e1890710e76b3d7427a0a8b129e85d920101e2fa00b634697788aa39c9c3532c74fc9611308eaf027504a249513c988e304f8c2091a6fd4094218416e2045d75d67dbb98c5268f1167be1a4650b7b52d7c956c069a16bcffa31a021", &(0x7f00000000c0)="407c6a933a6c37a520a2c82dd9853c17866c0f23c52edf4574f0aeb122e720358c957ec19139cb67bbcf566428045c11188854df17b08061fe861d141dca1327a46f66f1d8554a7cb72896d2102d23e858386870a7cab0adc970d2ba18300ad263419c3290f393b122", &(0x7f0000000140)="ae6de55b7620c438ca9ad0d7a7ca22de80569cb09fc0a9c6d6ea0619"]}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:46 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x0, 0xfffffffffffffffc}, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x61a800) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:47 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10) r13 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r13, 0x0, 0xcb, &(0x7f0000000000), 0x10) r14 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r14, 0x0, 0xcb, &(0x7f0000000000), 0x10) r15 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r15, 0x0, 0xcb, &(0x7f0000000000), 0x10) r16 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r16, 0x0, 0xcb, &(0x7f0000000000), 0x10) write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC=r16, @ANYRES32=r8, @ANYRES32=r9, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r10, @ANYRESDEC=r11], @ANYRES32=r12, @ANYRESOCT, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYPTR]], @ANYRES32=r13, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r14, @ANYPTR64, @ANYRES16=r11], @ANYBLOB="243eabd37b8d17066a01a28a23b8ae0af735258777a39bf528c59c75cca3b206e2e2fde0cfd2cd1398b21fa0d9eb6db08a2fa558c2cfe568c56233a656f34e4c7f23bb552d66a9bf31f79f798d67dffa6a35c8a93eee9a1b6ad166721802eea33512538b92b32553e1df6bdd93280f4c02c5e036263e66f603d628d9c096ce0abf519e4222bcdfef6162a93da00fa21f4d96086a73473bccb1371ab8c41d8205a3172fce0ce83777ce77552b4c94ea6d5afe883c7b0a6117d303d0576fe7c9e884e71842963b5add06ae4822d67863ba15f665bbcd398d3fce5dbed86657ac75f094", @ANYRES32, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="78bb8baf38f22e5745155a553c71461534bb2a5638e066e1af59cb77e219b380128fda05dae0275d1aaaa0fe2a59203179bf4a69d789a29fa242edadcde7380b626c4eff8f6da6a80bb495c48d6d82a8aaabd1da34e413d30fba1331002794e5ace907d66f103610e9394ee994af5dd0dd8e5450b58089fcffd8f1b7a26535a7c9a9bb341c1e08c59f1fb3a4f80c21b004eb33e26ec226608d4f793bd1d0f03f9c7747bb16ca", @ANYRESOCT=r15], @ANYRESDEC, @ANYRES64, @ANYRES64]], 0xfffffffffffffdbd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x5, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r5, r4) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x42c0, 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:47 executing program 3: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x573ab62f, 0x40900) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0) 04:54:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000300)="ca5b1d0b629b2cd32bcd1a5ee243be7afce30f619851ad541aae26d2a055012ab3c4fd5f32967a0005c64d4d0b8cd2960d110b985eb8332e7c7f806f39911244da26b7eabda5097c1c3bd48fd86babe659e3e0761b1eeb6d357499eaf9e2713590d2667a2840fb80ca43a8b6fc2561b3a7", 0x71}], 0x1, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000240)='./file0\x00', 0x160) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20009, 0x8e}, 0x0) r0 = getpid() r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x9, 0x100, "c342f0ad01fae0c83a616bbb3030f96167a3a0ebd7b1f14b477cb9a31f2b5df5"}) sched_setattr(r0, &(0x7f0000000140)={0x2af, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x2a) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x28) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x84000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r7, r6) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) 04:54:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2480) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x5, 0x9}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x2000000, &(0x7f0000000300)={[{@index_off='index=off'}, {@xino_on='xino=on'}, {@metacopy_on='metacopy=on'}], [{@euid_gt={'euid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '4\x10\x16\xaf\x16;z!MK\xd2k\xb5\xe6_\xa6\xfb\x15C\xfa\xd2\x1f\xb6\x00\x00\x00\x00\x00\x00\x00@\x8enh\x83\x89\xa1y\xab\xb8\xaa\xcc|0\xae\x00\xa2AcG8\xdf\xa1\xd5\r\x89\xa9{I\xc8P\xe1\x9e\xaf\x89^\x83\xb2).6\xdf\x9d\a\xbd\xd3\xd5gQ\xb6\x1a|\x1f\xe4\xaf-[\xae\xee<\xa5+x\xb2e\x8e?\r\xd8\x9e,]kW\x85G\xba\xfa\xc5\xe5\xeb\xe7\x94\x12F\x185*F\xaa\x89\xfa4\xde\xb5\xa6L\xf3\xb9,\x96\x17\xb86\x03a\x17o\xdb\x16\xef\xf3/\xc7\x14'}}, {@appraise_type='appraise_type=imasig'}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x61, 0x34, 0x65, 0x38, 0x32, 0x31, 0x37], 0x2d, [0x31, 0x39, 0x33, 0x63], 0x2d, [0x37, 0x34, 0x37, 0x36], 0x2d, [0x65, 0xd8, 0x37, 0x39], 0x2d, [0x38, 0x37, 0x65, 0x33, 0x5, 0x0, 0x33, 0x31]}}}]}) [ 873.360141] net_ratelimit: 12 callbacks suppressed [ 873.360147] protocol 88fb is buggy, dev hsr_slave_0 [ 873.370283] protocol 88fb is buggy, dev hsr_slave_1 04:54:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20000000001, 0x400000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) 04:54:48 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f00000000c0)={0x2, 0x6f83cff}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:48 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x0, 0xfffffffffffffffc}, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r7 = socket(0x10, 0x2, 0x81) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:48 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10040) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) 04:54:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, r6, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r8, r7) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r9 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)=0x8) r11 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, 0x0) r12 = accept4$alg(r9, 0x0, 0x0, 0x100000) r13 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r12, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r8], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r13, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r9], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 873.920095] protocol 88fb is buggy, dev hsr_slave_0 [ 873.925251] protocol 88fb is buggy, dev hsr_slave_1 04:54:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x5, 0x2) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r7 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xf000000, 0x1, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98090f, 0x7fffffff, [], @p_u16=&(0x7f0000000040)=0x6}}) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x7fffffff, 0x6}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x4b, 0x201, 0x3e, 0x78, 0x0, 0x56, 0x0, r4}, &(0x7f00000001c0)=0x20) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) [ 874.320098] protocol 88fb is buggy, dev hsr_slave_0 [ 874.325253] protocol 88fb is buggy, dev hsr_slave_1 04:54:49 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000000c0)=""/144, &(0x7f0000000200)=0x90) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x5, 0x2) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r7 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x5, 0x2) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r7 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x5, 0x2) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r7 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0xe) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) bind$inet(r9, 0x0, 0x339) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r10 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8) r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0) r13 = accept4$alg(r10, 0x0, 0x0, 0x100000) r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97ee423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 875.440148] protocol 88fb is buggy, dev hsr_slave_0 [ 875.445254] protocol 88fb is buggy, dev hsr_slave_1 04:54:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0xe) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) bind$inet(r9, 0x0, 0x339) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r10 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8) r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0) r13 = accept4$alg(r10, 0x0, 0x0, 0x100000) r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97ee423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r7 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) r10 = accept4$alg(r7, 0x0, 0x0, 0x100000) r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:50 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000003c0)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb77bd86713f8600}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xcc, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc20c}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x8002) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r7 = add_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="72957e6d98b390ca42b19d4f4006cdbf2753dfb24cc2d57a1fb1a62d0c0d8149a27f", 0x22, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000400)='encrypted\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r7}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r6, 0x0, 0x30005, 0x0) 04:54:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) dup2(r6, r5) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0xe) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) bind$inet(r9, 0x0, 0x339) socket(0x0, 0x1a6273f2b2e289f7, 0x0) r10 = socket(0x10, 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8) r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0) r13 = accept4$alg(r10, 0x0, 0x0, 0x100000) r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97ee423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:54:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) r5 = userfaultfd(0x1800) sendfile(r5, r4, 0xfffffffffffffffe, 0x8) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x30) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0xf000000, 0x400, 0x3, r7, 0x0, &(0x7f0000000140)={0x990965, 0x0, [], @value=0x8}}) dup2(r10, r8) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x1a6273f2b2e289f7, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8) open(0x0, 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 876.007073] protocol 88fb is buggy, dev hsr_slave_0 [ 876.012508] protocol 88fb is buggy, dev hsr_slave_1 04:54:50 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000440)={0x500000, 0x10001, 0xc839, r7, 0x0, &(0x7f0000000240)={0x910f3a, 0x800, [], @value=0x3}}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000100)={0x0, 0x42972f0d5d4b6c44}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000400)={r5, 0x2}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$x25(r8, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x100800) r9 = creat(0x0, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85) recvfrom$x25(r1, &(0x7f0000000080)=""/246, 0xf6, 0x2002, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0) [ 876.554504] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 876.562224] RAX: ffffffffffffffda RBX: 00007fe609685c90 RCX: 000000000045af49 [ 876.569589] RDX: 0000000000000045 RSI: 00000000200001c0 RDI: 0000000000000005 [ 876.577397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 876.585289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4 [ 876.593533] R13: 00000000004c1697 R14: 00000000004d6540 R15: 0000000000000003 [ 876.624212] syz-executor.4: vmalloc: allocation failure: 4096 bytes, mode:0x14280c0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 876.645241] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 876.650999] CPU: 1 PID: 13696 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0 [ 876.658895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.668251] Call Trace: [ 876.670849] dump_stack+0x142/0x197 [ 876.674488] warn_alloc.cold+0x96/0x1af [ 876.678482] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 876.683334] ? _parse_integer+0xe8/0x140 [ 876.687409] ? __get_vm_area_node+0x27f/0x340 [ 876.691913] __vmalloc_node_range+0x3c3/0x6a0 [ 876.696421] ? selinux_capable+0x36/0x40 [ 876.700499] __vmalloc+0x44/0x50 [ 876.703898] ? bpf_prog_alloc+0x40/0x1e0 [ 876.707964] bpf_prog_alloc+0x40/0x1e0 [ 876.711855] bpf_prog_load+0x292/0xf20 [ 876.715752] ? find_held_lock+0x35/0x130 [ 876.719825] ? __bpf_prog_charge+0xc0/0xc0 [ 876.724075] ? lock_downgrade+0x740/0x740 [ 876.728240] ? kasan_check_write+0x14/0x20 [ 876.732486] ? _copy_from_user+0x99/0x110 [ 876.736653] SyS_bpf+0x43b/0x2db8 [ 876.740120] ? __mutex_unlock_slowpath+0x71/0x800 [ 876.744972] ? bpf_prog_get+0x20/0x20 [ 876.748786] ? wait_for_completion+0x420/0x420 [ 876.753400] ? __sb_end_write+0xc1/0x100 [ 876.757482] ? fput+0xd4/0x150 [ 876.760682] ? SyS_write+0x15e/0x230 [ 876.764408] ? bpf_prog_get+0x20/0x20 [ 876.768221] do_syscall_64+0x1e8/0x640 [ 876.772122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 876.776978] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 876.782237] RIP: 0033:0x45af49 [ 876.785428] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 876.793148] RAX: ffffffffffffffda RBX: 00007fe609685c90 RCX: 000000000045af49 [ 876.800423] RDX: 0000000000000045 RSI: 00000000200001c0 RDI: 0000000000000005 [ 876.807699] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 876.814984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4 04:54:51 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 876.844106] free:483812 free_pcp:333 free_cma:0 [ 876.878436] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 876.933589] Node 1 active_anon:1528236kB inactive_anon:84kB active_file:17856kB inactive_file:21824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25084kB dirty:868kB writeback:48kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:54:51 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}, 0x0) r3 = getgid() r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r5) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x0, r2, r3, r5, 0xee01, 0x0, 0xea3a}, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = creat(0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 877.373173] lowmem_reserve[]: 0 0 0 0 0 [ 877.377389] Node 0 DMA: 1*4kB (U) 8*8kB (UEH) 15*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB [ 877.409999] Node 0 DMA32: 27*4kB (UMH) 56*8kB (UMEH) 776*16kB (UM) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29516kB 04:54:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) [ 877.446222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 877.473805] Node 1 Normal: 129*4kB (UME) 120*8kB (UME) 70*16kB (UME) 62*32kB (UME) 105*64kB (UME) 26*128kB (UM) 14*256kB (UM) 8*512kB (M) 3*1024kB (ME) 3*2048kB (ME) 455*4096kB (M) = 1895204kB [ 877.534867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.549103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 04:54:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)=0x6bf0, 0x4) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000000c0)={0x29, &(0x7f0000000080)=""/41}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1, 0x9, 0x5736a63468c9cc24, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0xffffff81}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x8b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x4080020) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x1, 0x2, 0x4, 0x4000000, 0x8cd1, {0x77359400}, {0x4, 0x0, 0x39, 0x8, 0x1, 0x20, "897273f9"}, 0x0, 0x2, @offset=0x20, 0xe0f, 0x0, r1}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000002c0)={0x7, 0x9, 0xd6, 0x20}, 0x10) [ 877.589557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.628239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.646897] 11718 total pagecache pages [ 877.652801] 0 pages in swap cache [ 877.658390] Swap cache stats: add 0, delete 0, find 0/0 [ 877.667292] Free swap = 0kB [ 877.704602] Total swap = 0kB [ 877.716349] 1965979 pages RAM [ 877.731539] 0 pages HighMem/MovableOnly [ 877.737340] 335871 pages reserved [ 877.743137] 0 pages cma reserved 04:54:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYPTR64], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x23c, 0x10, 0x0}, 0x45) 04:54:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) pipe2$9p(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002500)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000002600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x2cb, 0x400000000000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000200)='./bus\x00', r6, r7, 0x400) stat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000002880)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x3, @rand_addr=0x4}, {0x2, 0x4e23, @loopback}, 0xd0696f683a059765, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002840)='team_slave_1\x00', 0x1000, 0x1f}) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) fcntl$getownex(r9, 0x10, &(0x7f00000027c0)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000002800)=r10) write$P9_RSTATu(r2, &(0x7f0000002700)={0x8e, 0x7d, 0x2, {{0x0, 0x6a, 0x40, 0xfffffff8, {0x28, 0x0, 0x7}, 0x1000000, 0x8001, 0x4, 0x2, 0xf, '/dev/dri/card#\x00', 0xf, '/dev/dri/card#\x00', 0xf, '/dev/dri/card#\x00', 0xa, ':mime_type'}, 0xf, '/dev/dri/card#\x00', r3, r7, r8}}, 0x8e) r11 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SIOCAX25NOUID(r11, 0x89e3, &(0x7f0000002900)) preadv(r1, &(0x7f0000002440)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/29, 0x1d}, {&(0x7f00000021c0)=""/241, 0xf1}, {&(0x7f00000022c0)=""/148, 0x94}, {&(0x7f0000002380)=""/179, 0xb3}], 0x8, 0x2) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 04:54:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 04:54:52 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x256) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/204) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x9, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:54:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/create\x00', 0x2, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r8, @ANYRES64=r9/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3b486c908c6f6dc9}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x274, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x198, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x2}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_count={{0x120, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xe1f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xc173}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 04:54:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r3, @ANYRES64=r4/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r5 = socket(0x10, 0x2, 0x0) setsockopt$inet_dccp_int(r5, 0x21, 0x6, &(0x7f00000002c0)=0x1000, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc1020800}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@expire={0x108, 0x18, 0x800, 0x70bd2c, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0xffffffff, 0x4e20, 0x47, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x1d4ca5b5408df66e, r2, r6}, {@in=@empty, 0x4d5, 0x6c}, @in6=@loopback, {0x9, 0x3f, 0x3f, 0x9, 0x100, 0x8, 0x100000000, 0x5}, {0x40000000000, 0x401, 0x401, 0x1ff}, {0xfcf, 0x82}, 0x70bd28, 0x34ff, 0xa, 0x1, 0x80, 0xc}, 0x81}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0x2}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) 04:54:53 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80040, 0x0) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x1, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x4f}, @jmp={0x5, 0x0, 0x4, 0x5, 0x496301163207be44, 0x4, 0x642fd64c69102401}, @jmp={0x5, 0x0, 0xe20c12637b38ff05, 0x4, 0x8, 0xffffffffffffffff, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80}, @ldst={0x4, 0x0, 0x6, 0x799990a9149f374b, 0x5, 0xfffffffffffffff0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c1}, 0x45) 04:54:53 executing program 3: r0 = creat(0x0, 0x100) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000100)=""/231, 0xe7) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f00000000c0)='fd\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x21c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) prctl$PR_GET_FP_MODE(0x2e) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r10) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r12) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000640)=0x0) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r18) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r20, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_IP_XFRM_POLICY(r20, 0x0, 0x11, &(0x7f0000000880)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getegid() setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000b80)={{}, {}, [{0x2, 0x1, r10}, {0x2, 0x1, r12}, {0x2, 0x7, r13}, {0x2, 0x4, r14}, {0x2, 0x2, r15}, {0x2, 0x8, r16}, {0x2, 0x1, r18}, {0x2, 0x2, r19}, {0x2, 0x1, r21}], {0x4, 0x4}, [{0x8, 0x2, r22}, {0x8, 0x26957c105ba5f5d4, r23}], {0x10, 0x2}, {0x20, 0x1}}, 0x7c, 0x5) ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000080)={0x4}) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) 04:54:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000008000063010000f50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 878.480108] net_ratelimit: 6 callbacks suppressed [ 878.480113] protocol 88fb is buggy, dev hsr_slave_0 [ 878.490128] protocol 88fb is buggy, dev hsr_slave_1 04:54:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff0000/0xf000)=nil, 0xf000}, &(0x7f0000000180)=0x10) pread64(r0, &(0x7f0000000040)=""/198, 0xc6, 0x1) 04:54:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x200000000000006f, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@generic={0x40, 0x1, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xd5, 0x0, 0x0, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffedd) 04:54:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x5) 04:54:53 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xc0, 0x0) dup2(r0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063010000e1ff9af88e3928479a000000000023a4e7e6427b10c90ee794d67becf47be81cece10d0d412bdc4e5840"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:54:53 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0x140000000, 0x3, "563dec3aca9d4606e20cc9112f625ee1a180b00422e049f271ee9e1aafdb2f6b", 0x0, 0x3df81151, 0xf32f, 0x81, 0x2, 0x596, 0x2d2, 0x1f, [0x5, 0x3, 0x67ac]}) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400a3cb9c91cb0a25d08000000000000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x34000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12004002}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x54, r7, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x70f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x863c27ca65808922}, 0x40) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) socket$rds(0x15, 0x5, 0x0) 04:54:53 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff}, 0x13f}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r7 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r9}) ioctl$DRM_IOCTL_NEW_CTX(r8, 0x40086425, &(0x7f0000000100)={r9, 0x42972f0d5d4b6c47}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4010641c, &(0x7f00000003c0)={r9, &(0x7f0000000480)=""/155}) setsockopt$inet6_int(r7, 0x29, 0xcf, &(0x7f0000000380)=0x9, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0xffffff75, 0xfa00, {0x0, r6, r3}}, 0xfffffe73) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r4, 0x5}}, 0x10) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000400)) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f0000000540)={0x3, "67437e91ad4121ed711bbcae69b109826921a2fef07aba88d35d2c7f7e577997", 0x6, 0x7b4c97540c4afb1a, 0x2, 0x2, 0x2a, 0x4, 0x0, 0x7fffffff}) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:54:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x501580, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000400)=0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYBLOB='K\x00\x00\x00'], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={r3, 0xe2, "45b589a7818882715e6e2f78c18b887c69d3cba6cc53c8533e74b866410e578595575de37450ebaf32378028b2267e49bf1a45cd7e368ee0db40216dee6974d0f7fa221a528a6e8f76c4f32f3802442a5799d53016e706629fbcd866866381ff7519e1d4d93befab58fda6fb863b068e67fcaeb98229757719915e9012308d16f3151c3d29500e8e210bc3a3ece51be760b02f87095aa234e3f4e8e8377f846c16a7c00a74644ce09128f7569ee63ddd801ef99f8d4f33597b10c55833fb1c414b14883733a84f352729a8c4c44904947eb5c3386303c45ccc935a2c383061e6f4ff"}, &(0x7f0000000140)=0xea) prctl$PR_SET_TSC(0x1a, 0x2) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={r4, 0x3, 0x9f, "be102257c84d4c7d48942f18f217858d9119fc8897e65c6000fe7bfc7135787d112444a3cfd3e1498f04489ec35f97b91b629c307da08bfc7285fca3deee1445296cb014428c28b3213abbaa0f2376fe7e12b18ec8be9615a417d9dbf9317054337d3d5d47b0ee533c6da29271ec0739f5cbc0b584de085830ecef47fbac57ee50181f4d75103174970a049fe9e7712b1bf074059c71e1b2d567ae0c999b7f"}, 0xa7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000080)={0x5, 0x5, 0x0, 'queue1\x00', 0x58}) 04:54:53 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:54:56 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}, &(0x7f0000cab000)=0x397) setuid(r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x2cb, 0x400000000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000200)='./bus\x00', r4, r5, 0x400) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0xe15, {0x0, 0x4, 0x3}, 0x230d91c96114becd, r1, r5, 0x9, 0x10000, 0x53b8fbd, 0x800, 0x3, 0x81, 0x2, 0xfff, 0xc9, 0x2, 0x81, 0x8, 0xe7e, 0x0, 0xf8c8}}, 0xa0) 04:54:56 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @remote}}}, 0x118) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) write$FUSE_POLL(r8, &(0x7f0000000080)={0x18, 0x2f, 0x7, {0x81}}, 0x18) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:54:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 882.085488] audit: type=1400 audit(1578632096.689:100): avc: denied { map } for pid=13852 comm="syz-executor.0" path="socket:[128279]" dev="sockfs" ino=128279 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 04:54:56 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) write$P9_RATTACH(r4, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x20, 0x3, 0x2}}, 0x14) bind$netrom(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) fcntl$dupfd(r5, 0x406, r6) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 04:54:57 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x371) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r2, 0x81, 0x77, "67885cf2aca83c9336804e07eb32b9d510945a9ff966d4942600f770c1c679faa6fd437c7ce7b43839f6353d06b2082635d2f2f9f62a112c2707a1ab27ebc6a65dca7cebfa1944a5363a355b8a67d9ff5253034b2b97c4161684fc72ee973870966e2977b8cf0b8f3d91f36c5d78a2705afbd2f3cd5f8e"}, 0x7f) [ 882.640109] protocol 88fb is buggy, dev hsr_slave_0 [ 882.645241] protocol 88fb is buggy, dev hsr_slave_1 04:54:57 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) prctl$PR_GET_THP_DISABLE(0x2a) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff}, 0x4000) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:54:57 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92\x11\x00\x06\xe9\x18\xe2\xc7\xf0>\x00\x00\x00\x00\x00\x00W\x88w\xae\x15\xb4\xf8\x87\\\x8c\xc9\xd6\x9e\xbe\x0e\xda\x827\xba\xfb\xe5\a\xb3O\x91\xfe\xc8\xe1\xd5W\x8b>U\v\xd3\xf2o$nl\xd7\x9a\x872\xbad\xf1\xc0\xca2NLu\xb5\xa8~>h\x9f%\xf2W\x8f\x9a\xdb\x00\xe8]C\x004\x92?%\\K\x89r7S\xf6\xb4\x8f2S\x1a\xc0\xe0M\x11@', 0x4) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) 04:54:57 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='\xc2=\x9cx\x14\xd8\xd0\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7cea, 0x100) bind$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 883.605367] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 04:54:58 executing program 4: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0xfa4, 0x200}, 0x2}, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = creat(0x0, 0xa5) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = socket$netlink(0x10, 0x3, 0x7) write$binfmt_script(r2, &(0x7f0000000980)={'#! ', './file0', [{0x20, 'vmnet0!'}, {0x20, '}\\'}, {}, {0x20, 'GPL\x00'}, {0x20, 'GPL\x00'}, {0x20, '/dev/dlm_plock\x00'}, {0x20, '\''}, {0x20, 'nodevppp1['}], 0xa, "10199acebe6680df9f"}, 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0xba32f061cccb11d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x3, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) [ 883.668546] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 883.696743] CPU: 0 PID: 13915 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 883.704866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.715654] Call Trace: [ 883.718262] dump_stack+0x142/0x197 [ 883.721924] warn_alloc.cold+0x96/0x1af [ 883.725920] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 883.730872] ? wait_for_completion+0x420/0x420 [ 883.735751] __alloc_pages_slowpath+0x23c6/0x2930 [ 883.741673] ? warn_alloc+0xf0/0xf0 [ 883.745331] ? __might_sleep+0x93/0xb0 [ 883.749876] __alloc_pages_nodemask+0x62c/0x7a0 [ 883.755638] ? rcu_read_lock_sched_held+0x110/0x130 [ 883.760872] ? __alloc_pages_slowpath+0x2930/0x2930 [ 883.766573] alloc_pages_current+0xec/0x1e0 [ 883.770914] kvm_mmu_create+0xdf/0x1e0 [ 883.774832] kvm_arch_vcpu_init+0x29c/0x8e0 [ 883.779167] kvm_vcpu_init+0x272/0x360 [ 883.783288] vmx_create_vcpu+0xfc/0x2aa0 [ 883.788143] ? mutex_trylock+0x1c0/0x1c0 [ 883.792700] ? handle_rdmsr+0x6e0/0x6e0 [ 883.797140] ? wait_for_completion+0x420/0x420 [ 883.802033] kvm_arch_vcpu_create+0x8c/0xc0 [ 883.806549] kvm_vm_ioctl+0x501/0x1600 [ 883.810449] ? __lock_acquire+0x5f7/0x4620 [ 883.814690] ? get_unused_fd_flags+0xd0/0xd0 [ 883.819213] ? kvm_vcpu_release+0xa0/0xa0 [ 883.823368] ? trace_hardirqs_on+0x10/0x10 [ 883.827614] ? trace_hardirqs_on+0x10/0x10 [ 883.832141] ? __might_fault+0x110/0x1d0 [ 883.836306] ? save_trace+0x290/0x290 [ 883.840117] ? __might_fault+0x110/0x1d0 [ 883.844187] ? __fget+0x210/0x370 [ 883.847650] ? find_held_lock+0x35/0x130 [ 883.853045] ? __fget+0x210/0x370 [ 883.856539] ? kvm_vcpu_release+0xa0/0xa0 [ 883.860699] do_vfs_ioctl+0x7ae/0x1060 [ 883.864612] ? selinux_file_mprotect+0x5d0/0x5d0 [ 883.869380] ? lock_downgrade+0x740/0x740 [ 883.873543] ? ioctl_preallocate+0x1c0/0x1c0 [ 883.878134] ? __fget+0x237/0x370 [ 883.881778] ? security_file_ioctl+0x89/0xb0 [ 883.886296] SyS_ioctl+0x8f/0xc0 [ 883.889670] ? do_vfs_ioctl+0x1060/0x1060 [ 883.893827] do_syscall_64+0x1e8/0x640 [ 883.897791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 883.902931] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 883.908827] RIP: 0033:0x45af49 [ 883.912465] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.920290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 883.927573] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 883.934854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 883.942133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 883.949414] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 883.960149] net_ratelimit: 4 callbacks suppressed [ 883.960154] protocol 88fb is buggy, dev hsr_slave_0 [ 883.970119] protocol 88fb is buggy, dev hsr_slave_1 04:54:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18060000000d0000000000000000000063010000150000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 884.091109] Mem-Info: [ 884.093742] active_anon:853611 inactive_anon:1747 isolated_anon:0 [ 884.093742] active_file:4479 inactive_file:5464 isolated_file:0 [ 884.093742] unevictable:0 dirty:39 writeback:0 unstable:0 [ 884.093742] slab_reclaimable:15555 slab_unreclaimable:127023 [ 884.093742] mapped:60049 shmem:1792 pagetables:27880 bounce:0 [ 884.093742] free:482840 free_pcp:403 free_cma:0 [ 884.134864] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 884.167409] Node 1 active_anon:1532652kB inactive_anon:88kB active_file:17856kB inactive_file:21852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25088kB dirty:152kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 884.207891] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:54:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0x0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1c202, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) [ 884.243663] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 884.249403] Node 0 DMA32 free:30628kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:420kB local_pcp:292kB free_cma:0kB [ 884.307376] lowmem_reserve[]: 0 0 0 0 0 [ 884.311814] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.338605] protocol 88fb is buggy, dev hsr_slave_0 [ 884.338649] protocol 88fb is buggy, dev hsr_slave_1 [ 884.351715] lowmem_reserve[]: 0 0 0 0 0 [ 884.355825] Node 1 Normal free:1890260kB min:53508kB low:66884kB high:80260kB active_anon:1532852kB inactive_anon:88kB active_file:17856kB inactive_file:21852kB unevictable:0kB writepending:152kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20256kB pagetables:47040kB bounce:0kB free_pcp:836kB local_pcp:652kB free_cma:0kB [ 884.385920] lowmem_reserve[]: 0 0 0 0 0 [ 884.390211] Node 0 DMA: 0*4kB 8*8kB (UEH) 15*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10480kB [ 884.406843] Node 0 DMA32: 27*4kB (UMH) 151*8kB (UMEH) 798*16kB (UMH) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30628kB [ 884.432222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 04:54:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=""/225, 0xe1}) get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0x6, &(0x7f0000ff9000/0x4000)=nil, 0x1) 04:54:59 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x200001cd, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 884.460009] Node 1 Normal: 129*4kB (UME) 107*8kB (UME) 104*16kB (UME) 12*32kB (UME) 51*64kB (UME) 22*128kB (M) 13*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 454*4096kB (M) = 1889820kB [ 884.513262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.551407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 884.569883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.588718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 884.613227] 11735 total pagecache pages 04:54:59 executing program 4: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x0, "4787d4ed1cdd65603a083a9015ccb023dab19cd3bc813f1ada00eeb06837c67d81a184330810ca85499d823cc1d89296168ec828d54870f1e81bfa3fb58e4c6fe962868f1cd4d54bbde946969b78d57d6b211f2c64f3ebc5a78fc61581ccaec3c8da152af08decb04e894863d4a8cdbf2cdff148a86cffc54e07b9d0f38ba2eebefaa3eef1cf2f971f65e46f84de810214170e1815198b4e2e61a789e8ba6ee46cc83e92ff5a82c3a2fb29976e7b6cc18685dac9b5c5858af184891bd1ee40cbecd22559bdd1f0e7e4dec253143aa57b943aeb01e2c7814d92e34428142585aa8ed74bc680a76d346ac064e28b0397ad31a9ed9f42d17bb62d218cee0770137b6e820ff5c3d7c4b43851ae0a28e8e4cf526346f317178824c4118b94989e2a876c392ab84089465e3cf62fa878126892700f7dd134dd540398c20e257439ee24965b980ed8abd3c0f8df27e1daa7e0af7a9635cef8c90895e6b85c04bd658d389eead18a6730bb112b29f8839c9e494d22387ba2f7e77442704e6505d57835dc57a03c46f9293ca7ca9b4a7c9a6236bbc6d3bb4214662d0e0c4afd67fce3a0f9480152baf394bdcaa411295ad42e5019bbc24bceb8568d215153b220be33fc5c723b2d4fb9f048f74384848ee3f1c534524dc8dcbf7ce7bb0ab93f0228bcf9a727416f40521d4b0e7923497da335bd4b60579502c286833fdb3045f2d81b06c1"}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000630100000000000095000000000000003702ed604ab009af7c09237760f3563a042c6bf97c8bd8eca66068cc73467758a3fff5d3a606ec2c2b5723e138e8584118e56fc9e7ed6a541667c65f5581e08527374e8351ac5d2a429d214971d06d8867ea3bbe8d0ca64b95111ad960ba631bcaefa66b83b3c26dbee0f38a26de680e4c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x3c3, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 884.626694] 0 pages in swap cache [ 884.645091] Swap cache stats: add 0, delete 0, find 0/0 [ 884.669730] Free swap = 0kB [ 884.696276] Total swap = 0kB 04:54:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x3, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x7, 0x200, 0x3, 0x9, 0xff, 0x80, 0x200}, 0xc) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) [ 884.720113] protocol 88fb is buggy, dev hsr_slave_0 [ 884.721108] 1965979 pages RAM [ 884.725236] protocol 88fb is buggy, dev hsr_slave_1 [ 884.743612] 0 pages HighMem/MovableOnly [ 884.769031] 335871 pages reserved [ 884.789414] 0 pages cma reserved 04:54:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x10280, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 04:54:59 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) dup(r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x260403, 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000200)=""/225) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:00 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYBLOB="0200000001000000020000202e02000045c286a2483b164f9853b1492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb2a13bc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601cfc1af081409d3625883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd90a9f27c76ae9e3eb73e27235527a84d01b15a8d6f1a09cf78375993e9e62ef9033219798f5e861c4ba9b9426b5f62bd7a300ece2c6fa8010a78cc3a8b92ab1f482ebde4e455f9979f1b17663b2719465f7799699a6edf79ac0d245ee990b083a067b5e61061b34a16985839f4148b468bf8d996667f21f4e9a9ffed8083512bac4e90b5f583d809e6877f60658c8fa4069ca3697277ddc703976b489e3a408a5fae2485607d8e011ce51801e44f526e8d739d32409600ae4b6813836478c214bd005cbabe1347c4230786745a00230000000000000000000000000000000000000000000031ca17010b342791289fb3c9c1fca5a777bba9324e497fcb2ed90c7ea237a4ee80537aa60a44b89aab7bd1bc1b12b06f96804b2d1e340603b0fdca514931d08de6a42714d8408ebdf39a7b542fceed6b0867d8e87b1205494ebdd9a873f4d7e992d2010d6da41c1ab6bbe21a378caa35819e"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) bind$packet(r1, &(0x7f0000000080)={0x11, 0x11, r3, 0x1, 0x81, 0x6, @dev={[], 0x1f}}, 0x14) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r9) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/mISDNtimer\x00'}}, {@debug={'debug', 0x3d, 0x9}}, {@access_client='access=client'}, {@fscache='fscache'}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@access_uid={'access', 0x3d, r7}}, {@cache_loose='cache=loose'}], [{@appraise_type='appraise_type=imasig'}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r9}}]}}) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:55:00 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, @in6={{0xa, 0x4e23, 0x10001, @rand_addr="546c93dbac0554d83d5fabcbebed0dc0", 0x7}}, 0x4, 0x7, 0x2, 0xd7ed, 0x4}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={r1, 0xe5, "96e0636eab289943737dfd82d6f2abf0bed888f0d17b9761d43b747691ad4e08a4094314e8ca7e2389f0e8ba2b168abfcb8fe5c6a719fb44f63a1bedf7ef6269707137054338c2c856a718b5d8f6ddd4ff2d4107aa7bd3ae1f0f1e9ab2f7eb335cf03e02a76a78940efbfe1beae815505ffab8ea9d616a1c988e3b0cbce2ffd9a4a80060ed4d53c6eb6c31fcd3224a06c5652320c03d1b1ae7c7ffeadc7954e63139db9189c896bf2103c0134f4e981a1eb01eabdff779f6812318f271d7cd605267bb9b4ec36a5a54a1a4e19e63cfd211bc680465fda25e007a21994f35475dd78a8393e0"}, &(0x7f0000000140)=0xed) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x4, 0x1, 0x100000000}) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r2, 0x0, r6, 0x0, 0x30005, 0x0) 04:55:01 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="fb276e9bdfdf6139901d1233bc875a765b3b623515d60b0ce69e11", @ANYRES64=r2/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) connect$pppoe(r5, &(0x7f0000000700)={0x18, 0x0, {0x1, @empty, 'veth0_to_bond\x00'}}, 0x1e) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x2, 0x0) flistxattr(r6, &(0x7f0000000580)=""/117, 0x75) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80)=0x1, 0x0, 0x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="b702000003070000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000f5067d60b7030000000000006a0a00fe18000000850000002b000000b70000000000000095000000000000000d7a28073a4102e4aeb54e36633e27c279341bf489903cfdb4c05e96e3046f04e77969be06340ee6af0d49910d063518598e7e290b39f2fc2a5e019bc6b45684f002cf57bf887e83fbb2215b8a34e6bdc4dc1af6d3c6958da4bddac602e0048bec11e874602f060000002af21b7552f0a0cc85ae281993bfa2139a3bb755c1f1abd1964007000000e27b2121a5f03dff9787dfd6e7608eb638e6fc4e0bc6bd5ff35928a5b5fa723028eb6ddd35ea79b92beeb52265a4b04ba50fd46a504116fb8ef84c2be021a6c9daf3f24ad7b965af8f522371c9a43c80ee6b397bea247e2d714090d43fe66bbf4f4ffe410bd701d035f867de2a20695033d91ee238c824e0b7a0aeffb9843947c3bc96e1f95c245168d2aeed2e00463d9cfdd58709e898c7ebad73fc48673c75c8b50db852621ad19c854622f7c7d79ec3ab4494353b458c718021f701442bbc6456bf0c9f6b822211eb1aa488fcaebb109382c7ab6db9b36ef24e466494e7b8549cc139a74b5aaaf265f35e8347eaabe01afe21d7b7a958e9cd04b5bfa5cf78dd2fa958dbb605cd1a99613369185b2bcfe0bf0e31c83fdcb254da7cd3958983d0798b455c8c5a5a8565d83d28437895929fa0896cf45eda77c4feae29d96568c487a74dd4f9e8465f09818c12dfc93fdb09a1d04a087d3bf219efab764d3cd676f101d3b6c9177c57340b245f15af472f1b837081969db2d58ceab0b432005a86e6c450ae4241c08a6469ac65af64737af961cc90132cd2ccb6d7adf63846af1554cfcaa4eb357142a5b525a18d9d88d42520c0903bc444dc0eec4d26e586eff7c432cd12be4c796f9ebe4481f971c52a8cc7b0edab7ae872c4832b61a54963185bb7cd1fb78ff9e194e17c65acd8d015443a21815bf56f08f1d2293c4c3e8899a972056380b4f332d39737b149e16bb098c0ef5d362cde82509ead8932869d3d9b527c9e53c5c41f4d711d8b68a0a16c018ce2a24832d78f886d1ebf7300384b13efefa03ad55fbaefc026eaa571d5deb4495ebd6fc7d457af008e74855562bbb4f255c5a6819ad2b607dad73277ce2756e0ccfdd7403d13938b4bae98b98b621c309b18df38a1cd779bf479096c09851c1f2e1765212094ffb97ebf972e48871f76b5e0cdfda81df28e5f721f8a63c0fbd8ac992d7535452f7af68f5ae22020afd0a6036d51cda98fef44b69139315832d49fef81198f15ebe3a7548ba46451d93da03b99becd85851e7157d7e23b28060fc4fa989796900a9d76008d537275a8fb1d419408248ddc98113e884991726bf05401000000a5e0f6bc373e438df8508198cb61a4640684d02f9f97cedee66f2098eaa9ee8dedc0003731c511efcfa620075518635230b3467b92bf76b271bdab823dc284323acc4fc92e8fe452351272730702208f58ebf791adae9111d09727ed1d6fa159ee87aed74e5bfc1c93da96da4f3d0d8c03273b474bd194d2579541016370d3f5258941be928d191261a6139090e32cd51089d136548ccdabfe1d2cc8e151cc6ecc1b91551eabca418e41289498d659f2ab89bbe5d40ed966b5ff74b12db521c36ce6c1daaafd9dca802bac19ed4e70a64d2a99092098493764662cc153f57deaff4f68ae76f3451daf9b27a11744b9b69f6ce477d6ee279bba72df0f04e22eb2650df6cde761917dea7c34e113ec765bb5fa0c71b8c2e25f001118fbc496a153a0d6e08a8f9117165e01044cb9fb0bb4026372effb9490290541a3930b38705e05758b90f8cf42b4886d417da85e8ab3c9efb8ad688491ba005eb7a798e935f7308ddbd001e478ccb308bc6596cc0000000000002871fc836b684bc31d2b978cfbe8fa01d1484504e794f9c8edcca1a761693a163b2ded571598e9f2993f178c50e371b137717ddd8e77eb52218ce865f24e82"], 0x0, 0x0, 0xfffffffffffffc32, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r9}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r6, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r9}, 0x78) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000040), &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xd, [], r1, 0xe, r3, 0x8, &(0x7f00000000c0)={0x800008, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x4, 0xff}, 0x10, r9}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x78) 04:55:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x1, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x9e, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0) r0 = creat(0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb002204}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xea996d328eb86807}, 0x40000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x2) 04:55:01 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001780)={@mcast1, 0x0}, &(0x7f00000017c0)=0x14) connect$packet(r0, &(0x7f0000001800)={0x11, 0x0, r1, 0x1, 0x2}, 0x14) 04:55:01 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r3, 0x4c0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x6}, 0x8) r5 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@mcast1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x1, 0x0) write$P9_ROPEN(r1, &(0x7f0000000280)={0x18, 0x71, 0x1, {{0x160, 0x1, 0x6}, 0x4}}, 0x18) 04:55:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000feff6200000000e8ffffff5d6ece7b000000"], &(0x7f0000000000)='GPL\x00', 0x40000, 0xfffffffffffffdd8, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1ba}, 0x78) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) 04:55:01 executing program 4: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x980000, 0x1000, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980909, 0x8, [], @value64=0x4}}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:01 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xf4, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) socketpair(0x3, 0x5, 0x81, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x1, 0x3f, 0x0, 0x50, 0x1, 0x0, 0x1d, "08a9306e534b6342685e62067037934e9feafffe", "fd4d347f43cbe971720d3ff5231dc4634bc9bc7c"}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x8000, 0x47425247, 0xfff, 0x5, 0x3, @stepwise={{0x4}, {0x401, 0x60}, {0x0, 0x7}}}) 04:55:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x243c) 04:55:02 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x4, 0x0) preadv(r3, &(0x7f00000017c0), 0x2cb, 0x400000000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000200)='./bus\x00', r5, r6, 0x400) setfsgid(r6) r7 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$vsock_stream(0x28, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x800) ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000440)={'bridge0\x00', @ifru_names='netdevsim0\x00'}) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$EVIOCGKEY(r10, 0x80404518, &(0x7f0000000100)=""/84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x30, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x843dbfd5446e97a6, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r8, 0x0, 0x30005, 0x0) 04:55:02 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$fb(r0, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x8, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffee8, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000000c0)=0xbdbc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x800, 0x0) 04:55:02 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x8000, r3}) 04:55:02 executing program 4: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x3f, 0x8, 0x8, 0x42, 0x3f, 0x80}, 0x6}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:02 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x4, 0x20, 0x401}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x8001, 0x201, 0x0, 0x68, r3}, &(0x7f0000000200)=0x10) 04:55:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x9f0000, 0x3, 0x1ff, r0, 0x0, &(0x7f0000000080)={0x99096f, 0x5, [], @p_u16=&(0x7f0000000040)=0x8}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, "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"}) 04:55:02 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff}, 0x800) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) recvmsg$can_bcm(r3, &(0x7f0000001700)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000001540)=""/27, 0x1b}], 0x7, &(0x7f0000001600)=""/199, 0xc7}, 0x600140c3) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000002a80)={@loopback, @rand_addr=0x6}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000002a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000001740)=@delchain={0x12b0, 0x65, 0x202, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0x1c}, {0x0, 0xfff2}, {0x17, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x8, 0xb, 0x81}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x1264, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffed, 0x7}}, @TCA_MATCHALL_ACT={0xdc, 0x2, @m_gact={0xd8, 0x1f, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xd00, 0x0, 0xc, 0x5, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x68f, 0x1, 0x7, 0x0, 0xc000}}]}, {0x94, 0x6, "985ec4c0bd40fb47dddf7948314c68ad5429dc6ce3e7101209f865bbe02c36ab0608a4d8c849f45ebafdf9650a8922fcab6bf24596fd40fcf020b7f15a9831219ee7641cd8ff5af8fbd6b65b605d4e066a508f3450d60a1ca2044b2cabb5d87c690d79f501cfea928e1564b9f0c96cf8e19c6ad59c79cf0e9f11695a83829a80017e9b8f753c4918681fac370b855a91"}}}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x859e875ec05a0d73, 0x2}}, @TCA_MATCHALL_ACT={0xf0, 0x2, @m_mpls={0xec, 0xc, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1ab83}, @TCA_MPLS_TTL={0x5, 0x7, 0xce}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5e301}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x97, 0x6, "3e67171d211f194b21109a8d5d760683fdae9c34b47a8f0478a30de561c1fd445e5caeffce8ee962e0f99cbdb0b3e986d0cd44b0508fd1a974aebd37cfce3722947fea5b4f31fd25f76a4ee34c2392c81d1a107fae7127a781a5d320135ea5a32bf8dad5b54d86f95a70c688fa2ce625bb2f87510d07cfe33994bdf53c09da681fff5fdede02661552e87154655e3f73194cd4"}}}}, @TCA_MATCHALL_ACT={0x107c, 0x2, @m_tunnel_key={0x1078, 0x9, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7e90, 0x1f, 0xffffffffffffffff, 0x9, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, {0x1004, 0x6, "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"}}}}]}}, @TCA_CHAIN={0x8, 0xb, 0xdb93c38}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x800}, 0x80c4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002ac0)) 04:55:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:55:02 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc}, 0x113) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000100)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:03 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x0, &(0x7f0000000140)={0x1, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x3, 0x8, 0x81, 0x600000}, &(0x7f0000000240)=0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@null, @null, @default, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 04:55:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) getpeername(r0, &(0x7f0000000080)=@generic, &(0x7f0000000180)=0x80) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 04:55:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000380)=0x4) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}, &(0x7f0000cab000)=0x397) setuid(r5) r6 = getegid() mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}], [{@smackfshat={'smackfshat', 0x3d, '\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980001, 0xd2, [], @value64=0x5}}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0xa, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:55:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r5) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x0, &(0x7f0000000140), 0x20000, &(0x7f0000000380)=ANY=[@ANYBLOB='resize,umask=0x0000000000000004,mask=^MAY_APPEND,uid>', @ANYRESDEC=r5, @ANYBLOB=',rootcontext=user_u,fowner<', @ANYRESDEC=r2, @ANYBLOB=',smackfsdef=lo,obj_role=systemwlan0cpusetppp0vboxnet1.eth1,smackfsfloor=/dev/dri/card#\x00,uid=', @ANYRESDEC=r5, @ANYBLOB="9de269643c", @ANYRESDEC=r7, @ANYBLOB=',\x00']) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x4b, 0x6, 0x0, {0x2, 0x1, 0x22, 0x0, 'systemwlan0cpusetppp0vboxnet1.eth1'}}, 0x4b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r8 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) r9 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4) linkat(r9, &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x400) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000140)={0x0, 0x40000, r3}) r11 = syz_open_procfs(r4, &(0x7f00000004c0)='net/udp\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000500)={r10, 0x0, r11}) [ 889.280134] net_ratelimit: 12 callbacks suppressed [ 889.280139] protocol 88fb is buggy, dev hsr_slave_0 [ 889.290277] protocol 88fb is buggy, dev hsr_slave_1 [ 889.295433] protocol 88fb is buggy, dev hsr_slave_0 04:55:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r4 = geteuid() getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r7) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r8, &(0x7f00000017c0), 0x2cb, 0x400000000000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r8, &(0x7f0000000200)='./bus\x00', r10, r11, 0x400) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040004000006000000000000", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="10000200000000002000060000000000"], 0x74, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:04 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = dup3(r2, r0, 0x80000) recvfrom$x25(r3, &(0x7f00000000c0)=""/147, 0x93, 0x2, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$inet6_dccp_int(r6, 0x21, 0x0, &(0x7f0000000240)=0x10000, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x973c}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 04:55:04 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92r1}) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) 04:55:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x80000001, 0x1ff, 0x5, 0x5, 0x1f], 0x5, 0xfffffffc, 0x7, 0x4, 0x3, 0x3, 0x259, {0x8001, 0x3ff, 0x100, 0x9, 0x2, 0x8, 0x8, 0x3f, 0x2, 0x9, 0x5, 0x4, 0x7, 0x6, "2d08eda3b54fce35cb44781f390e86a5300a9b82496ce554aaa538773c59ccbf"}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) 04:55:04 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r6}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r3, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r6}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xdb6}, @alu={0x7, 0x0, 0x9, 0xa, 0x5, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x21700, 0x1, [], 0x0, 0x19, r1, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0xfff, 0x401}, 0x10, r6}, 0x78) [ 890.422528] Node 1 active_anon:1535620kB inactive_anon:88kB active_file:17856kB inactive_file:21912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25088kB dirty:148kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:55:05 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x6}, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}]) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) recvfrom$llc(r4, &(0x7f00000002c0)=""/25, 0x19, 0x2, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="d57ad03dbecb6f45d3434c6f7982ff7fc545d11756c37e2e29055261139b690d683598ce99efb0b74cc84f934a918ac1dd961c993947081515805a90a230fbb1bd9ba0cc827a6e01cfb332", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf250300000008000200020000003c000400050003000000000005000300b200000005000300050000000500030005000000050003000700000005000300010000000500030005000000"], 0x58}, 0x1, 0x0, 0x0, 0x4044800}, 0x404c000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$packet(0x11, 0x2, 0x300) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 04:55:05 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r8}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r9, @ANYRES64=r10/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20012100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040079}, 0x2af7918fba376f8f) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40500e8}, 0x4) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r12 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r8, @ANYRES64=r9/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r11}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r14 = syz_open_procfs(0xffffffffffffffff, 0x0) r15 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ocfs2_control\x00', 0x20002, 0x0) getsockname$packet(r15, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r14, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r16}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r17, @ANYRES64=r18/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r19 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r19, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$PNPIPE_IFINDEX(r19, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r21 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r21, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r22}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r23, @ANYRES64=r24/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r25 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r25, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r26}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r27, @ANYRES64=r28/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80010002}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)=@newtfilter={0x380, 0x2c, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xf, 0x10}, {0xffe0, 0x10}, {0x2, 0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x1b8, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7fe8, 0xfff1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x100, 0x48, 0x7}, {0x6, 0x214565f0, 0x5}, 0x43, 0x20}}, @TCA_RSVP_ACT={0x184, 0x6, @m_connmark={0x180, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x979, 0x6, 0xffffffffdffffff6, 0x7, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x400, 0x5, 0x8, 0x10000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0xd, 0x1, 0xffff}, 0xb317}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x5, 0xffffffffffffffff, 0x80000001, 0x5}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x8, 0x0, 0x0, 0xffff}, 0x98c}}]}, {0xdc, 0x6, "b4ac46ef2032df181db368d18f9758aabbd1ab43cf6b2ea0f33698ef24684a23dd3fc99ddfe928ec0f1366c8c1bd63c56d71aad04f1c658174359bc458a29a3214673c62371003e246729be818573f12b18f4d817e99868e2ba7b5e73c2bd1ce7b79149f454d6b67a1531d16bf1d82a48fea1bbf681e416f381ddbe604b2bcc647d9fdd5649001cd0f4823983ba5a2a0b7eae3f5731a707e3cb3d9a5fc8843f5f2c4e78623ce5e981fab5a92b2e95d2d48cc5b241985b7b71c236f4decdd25efdb3df2d23c462a8f78a8ab27d1c62a0a2ed3037147c1577c"}}}}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x174, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0xffff, 0xc63, 0x4, {0xff, 0x3, 0xfff7, 0xafef, 0x6, 0x6}, {0x2, 0x5, 0x5, 0x6, 0x1f, 0xfffffffc}, 0xfff, 0x8, 0x1}}}, @TCA_BPF_ACT={0xfc, 0x1, @m_mirred={0xf8, 0xb, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1000, 0x60000007, 0xff, 0x4a}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x1, 0x5, 0xfffff212}, 0x3, r16}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1ff, 0x7, 0x7, 0x4}, 0x2, r20}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x1bc, 0x22513b1b3237f9f7, 0x0, 0x79}, 0x0, r22}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0xffffffffffffffff, 0x1f, 0x5}, 0x5, r26}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x80000000, 0x20000000, 0x9, 0x9}, 0x3, r29}}]}, {0x21, 0x6, "c81bc8f5f5abc64e258ade673dce5a428d04086828b611f1373467aa7d"}}}}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x1, 0xd4, 0x8, 0x1}, {0xfff, 0x5, 0xff, 0x6486}, {0x100, 0x1f, 0xf7}, {0x9, 0x0, 0x7, 0x80}, {0xad1, 0x4, 0x3f}]}}]}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={[], 0x22}}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x40}, 0x0) r30 = accept(r4, &(0x7f0000000080)=@isdn, &(0x7f0000000180)=0x80) connect$inet(r30, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:55:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x1f) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) fstat(r0, &(0x7f00000000c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 04:55:06 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl(r2, 0x7, &(0x7f00000000c0)="dfd18cacb0a9e5c8b22948848944ce02946cc3ed37fdaad61074dff075dbed0b145ac5b783fc4b55f4aad79f87ed717d8e49868ad6c577ed8fd64fc92d45540a92b42dbc90c87c726ce52368d9a7f2302380c049f7faadf99526c14ff6941246423d03cb19211edd826c3309c885c7718666951755c46850cf9295d9068ba3957f657d46739b3b5215d9d85602cb1e7b50d9") syz_extract_tcp_res(&(0x7f0000000240), 0x5, 0x1) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f0000000340)="3e14974342ae1b260470b9391a0e8e689502ea35ee6045ae28c75e47cd5c14f8ee0de4653ac8cb749516312de05ff8ec99275d635323e50324d077a81bf4c53dd24407bc6bbb57524ec84be5e8b9e858d903944741877c788423e0112461a4b0784ee3c75e1a52ff2ecd201c7e788abd948952ebadb16536b8d0a6c705a502f6f71a5fdfca6e089d7427f5f349e1014e5d790e04e7101061fe8ef34e11e1e847d9782b4971055ea88c08dce2fd66041a8f0768ec68743626860f5bb6868224ff02d429320e82") connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:06 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/129, 0x81}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/19, 0x13}], 0x5, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/34, 0x22}], 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) 04:55:06 executing program 4: munlockall() 04:55:06 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x0}) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000005c0)={0x3, 0x3, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x7f, 0x4, 0x8, "0dfa0101"}, 0x3, 0x3, @userptr=0x7fffffff, 0xee, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000003c0)={0x7, 0x5, 0x4, 0x0, 0x3, {r2, r3/1000+10000}, {0x1, 0x8, 0x40, 0x4, 0xe1, 0xc0, "0eb71379"}, 0x0, 0x1, @fd=r4, 0x2b, 0x0, r5}) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000440), 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) connect$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x1}}, 0x10) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000480)={0x1c0b1743849ad42, @raw_data="29e51ae0994b50781e13a6133546891d8bae8d6f11e449bb5235957e7b4bcdaa5580d92d4485e20ff6354af480fb1bdb88408d7f569af3d54db6130c422ca6cf5c62cf97d9898615b0524bbc0b92c14e731fce460e542ea9bad3fd9230a650a9bd7107bee4c819341d1c5f142fddfa0668e2468fbc29825e139c5e2a0309e39e00208be0739e88f7480f802e405c1d886ebd25b5012c2027af88ffc2e9bd842729f7abb061435949bef86e32ed754493c3dd4f811a314dae2c4133e8b36012f0f4b2b14dc56aedef"}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000080000000000000000063018000000000009500000000d60000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffde0, 0x0, 0x41000, 0x8, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeb1, 0x10, 0x0, 0x0, 0x0, r9}, 0x78) r10 = open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x80) sendmsg$nl_route(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getneigh={0x14, 0x1e, 0x200, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20052}, 0x10) 04:55:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2, 0x0) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) bind$x25(r1, &(0x7f0000000080)={0x9, @remote={[], 0x0}}, 0x12) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:07 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r5 = creat(0x0, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='#@\x01}em0lolousertrustedppp0\x00', r6}, 0x10) write$binfmt_elf64(r7, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x4, 0x7, 0x2f, 0x200, 0x7, 0x3, 0x200, 0x31a, 0x40, 0xd4, 0x324c, 0xf801, 0x38, 0x2, 0x8, 0x60}, [{0x60000000, 0x1, 0x2, 0x5, 0xdc, 0x9, 0x6, 0x10001}, {0x7, 0xb1e, 0xffffffffffffff01, 0xfffffffffffffffa, 0x3, 0x4, 0x4, 0x56b}], "cb243f28dfdf98c287f9d6a00a0c8139e4ee3a4910f6d32f51c1594b99f14b83a496668202326fbf77562c371af95bff435d42d2ae6fee6bd50260facc1e930cb98bf919c0471e0c274610063e08f09d29708fce90563548ae739a25430c24bf42c446356a69eff1c6f083", [[], [], [], [], [], [], [], [], [], []]}, 0xb1b) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCMGET(r5, 0x5415, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x800, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x3ff) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'io'}]}, 0x4) 04:55:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:07 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r5, 0x0, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:08 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) 04:55:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x440) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x1) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x661, r2, &(0x7f0000000100)="ac7925d752d068587de3b8351844791b910000000000e600000000000100", 0x1e, 0x1}]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:08 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff}, 0x36f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000240)="db40951195b65329", 0x8) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x8000) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$revoke(0x3, r5) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000040)={0x1, 0x20, 0xe4}) 04:55:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@ldst={0x2, 0x3, 0x6, 0x73b18fbbddba6151, 0x4, 0xfffffffffffffff8, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r2, @ANYRES64=r3/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16], @ANYRESOCT=r2], 0x8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', r1}) [ 894.410094] net_ratelimit: 11 callbacks suppressed [ 894.410099] protocol 88fb is buggy, dev hsr_slave_0 [ 894.420238] protocol 88fb is buggy, dev hsr_slave_1 [ 894.720120] protocol 88fb is buggy, dev hsr_slave_0 [ 894.725253] protocol 88fb is buggy, dev hsr_slave_1 04:55:09 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x30) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x800, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xaca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x35c}, 0x1, 0x0, 0x0, 0x24050c00}, 0x4000) 04:55:09 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, @in={{0x2, 0x4e22, @loopback}}, 0x80000000, 0x4, 0x3f, 0x80, 0x10, 0x3, 0x1}, &(0x7f0000000180)=0x9c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000340)=0x9) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r1, 0x7}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 895.120133] protocol 88fb is buggy, dev hsr_slave_0 [ 895.125277] protocol 88fb is buggy, dev hsr_slave_1 04:55:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000280)={0x9d0000, 0x1f, 0xfff, r2, 0x0, &(0x7f0000000240)={0x400d6, 0x0, [], @p_u8=&(0x7f0000000200)=0xff}}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000ae58dd45f76edb4112e44bd6b73c319937f0b6caccd3b0cd8f46a6b68a5027487aacdd28c4921d4d286c821968b83eeda7d29a1629aa6eeac8aaac167a10a82e48b506ca6bde810db7a60f918574ecfa47", @ANYRES16=r5, @ANYBLOB="00032cbd7000ffdbdf250200000014000200ff02000000000000000000000000000105000100000000002400070073797374656d5f753a6f626a6563745f723a68616c645f6c6f675f743a73300014000200ff010000000000000000000000000001"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000180)={0x6, 0xe0b2, 0x800}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="48b8b8c20000000000000f23d80f21f835c00000100f23f8c462758e0d6e00000066b823010f00d00f019d0e0000000f799c5b1a0000000f01cfb9800000c00f3235008000000f30c4a1f85a6700c744240013000000c7442402d7d84492ff2c24c42191165e08", 0x67}], 0x1, 0x9ebed58c9d477307, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @cstype3={0x5, 0xb}], 0x2) 04:55:09 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r5}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x9ebc901f42a6dc09, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r7, 0x3) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 04:55:10 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2a200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x3) 04:55:10 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000808}, 0x40010) 04:55:11 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xffc95692317ff5e6, 0x4000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:11 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000080)=""/122, 0x7a) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x2, 0x10}, &(0x7f0000000340)=0xc) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x14, &(0x7f0000000640)={r6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r6, &(0x7f0000000240)=0x4) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x5}, 0x8) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) fcntl$lock(r8, 0x1bee5ed2be6679a8, &(0x7f0000000100)={0x0, 0x3, 0xa8, 0x1, r9}) signalfd(r7, &(0x7f0000000180)={0x7}, 0x8) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:55:11 executing program 4: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x408002, 0x0) read$dsp(r4, &(0x7f0000000100)=""/121, 0x79) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80)=0x1, 0x0, 0x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r6}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r6}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x20000000000000b1, &(0x7f0000346fc8)=@raw=[@call={0x85, 0x0, 0x0, 0x69}, @ldst={0x0, 0x0, 0x3, 0x6, 0xb, 0x8, 0x8}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x78) 04:55:12 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) connect$x25(r1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 04:55:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:12 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e22, 0x200, @loopback, 0x3}}}, 0x84) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000100)={0x1, 0x3}) 04:55:12 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400001, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x30005, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x400, 0x6, 0x4, 0x8, 0xfffffffa}) 04:55:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x40000, 0x0) 04:55:12 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0xff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0x100) write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "5bfffdfff2263e52ca5402ad2c0d54d83534f72a0a84b86cb66021a2cc5cd05f4635a0addf74b96ce9a71a2598962ea4e2f70def2b7a3298cd2ccc4f2b6bdae4cebaa1eaeba7adc7c11fc871c4cdf2c6d160a79cfe59ffbb670c1392271c56d8ffc58d235687eb1ae1ace57cdac451d0c5e8822d31ace5a1558df759813834932cd1373ad831ad993d2804799760cbe3ff71315c19ca3c974cc267b4e848fd65c4bec5905f18961896f315c18e11b53b9debab57d8b46cae4ebf7dc9fa341e7a19e704253e66ec9b54acc22796583a752644008ffe3cde77466d42b0137e90c90408d4886985b7892135ddf85df59a49e269f76cdf66c0321018a2a5"}, 0x10c) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_GET_VERSION(r6, 0x8004552d, &(0x7f0000000400)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'vlan0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000440)={0xff, 0x4, 0x4, 0x0, 0xffff, 0x5, 0x7, 0x5, 0x1, 0xac, 0x0, 0x10, 0x0, 0x757c, 0x5, 0x7d, 0x0, 0x40, 0x80, [], 0x1f, 0x694}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4ca]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r11 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:55:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000a1b6251f0c9d6ce2ffffff63010000000000007b000000000000000000000000002ffbffffffffffff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 898.419113] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 898.459343] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 898.472176] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 898.485029] CPU: 1 PID: 14607 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 898.492942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.502305] Call Trace: [ 898.504927] dump_stack+0x142/0x197 [ 898.508576] warn_alloc.cold+0x96/0x1af [ 898.512571] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 898.517434] ? wait_for_completion+0x420/0x420 [ 898.522042] __alloc_pages_slowpath+0x23c6/0x2930 [ 898.526912] ? warn_alloc+0xf0/0xf0 [ 898.530559] ? __might_sleep+0x93/0xb0 [ 898.534456] __alloc_pages_nodemask+0x62c/0x7a0 [ 898.539147] ? rcu_read_lock_sched_held+0x110/0x130 [ 898.544257] ? __alloc_pages_slowpath+0x2930/0x2930 [ 898.549297] alloc_pages_current+0xec/0x1e0 [ 898.553630] kvm_mmu_create+0xdf/0x1e0 [ 898.557526] kvm_arch_vcpu_init+0x29c/0x8e0 [ 898.561877] kvm_vcpu_init+0x272/0x360 [ 898.565783] vmx_create_vcpu+0xfc/0x2aa0 [ 898.569853] ? mutex_trylock+0x1c0/0x1c0 [ 898.573932] ? handle_rdmsr+0x6e0/0x6e0 [ 898.577917] ? wait_for_completion+0x420/0x420 [ 898.582512] kvm_arch_vcpu_create+0x8c/0xc0 [ 898.586849] kvm_vm_ioctl+0x501/0x1600 [ 898.590749] ? __lock_acquire+0x5f7/0x4620 [ 898.594997] ? get_unused_fd_flags+0xd0/0xd0 [ 898.599416] ? kvm_vcpu_release+0xa0/0xa0 [ 898.603581] ? trace_hardirqs_on+0x10/0x10 [ 898.607834] ? trace_hardirqs_on+0x10/0x10 [ 898.612094] ? __might_fault+0x110/0x1d0 [ 898.616169] ? save_trace+0x290/0x290 [ 898.619975] ? __might_fault+0x110/0x1d0 [ 898.624043] ? __fget+0x210/0x370 [ 898.627507] ? find_held_lock+0x35/0x130 [ 898.631573] ? __fget+0x210/0x370 [ 898.635034] ? kvm_vcpu_release+0xa0/0xa0 [ 898.639196] do_vfs_ioctl+0x7ae/0x1060 [ 898.643092] ? selinux_file_mprotect+0x5d0/0x5d0 [ 898.647854] ? lock_downgrade+0x740/0x740 [ 898.652020] ? ioctl_preallocate+0x1c0/0x1c0 [ 898.656444] ? __fget+0x237/0x370 [ 898.659909] ? security_file_ioctl+0x89/0xb0 [ 898.664329] SyS_ioctl+0x8f/0xc0 [ 898.667699] ? do_vfs_ioctl+0x1060/0x1060 [ 898.671849] do_syscall_64+0x1e8/0x640 [ 898.675736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 898.680595] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 898.685796] RIP: 0033:0x45af49 [ 898.688987] RSP: 002b:00007fe80f23dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.696707] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 898.703981] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000b [ 898.711259] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 898.718539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f23e6d4 [ 898.725818] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 898.750121] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 898.755546] CPU: 1 PID: 14603 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 898.763431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.772790] Call Trace: [ 898.775394] dump_stack+0x142/0x197 [ 898.779038] warn_alloc.cold+0x96/0x1af [ 898.783025] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 898.787884] ? wait_for_completion+0x420/0x420 [ 898.792488] __alloc_pages_slowpath+0x23c6/0x2930 [ 898.797353] ? warn_alloc+0xf0/0xf0 [ 898.801005] ? __might_sleep+0x93/0xb0 [ 898.804898] __alloc_pages_nodemask+0x62c/0x7a0 [ 898.809577] ? rcu_read_lock_sched_held+0x110/0x130 [ 898.814611] ? __alloc_pages_slowpath+0x2930/0x2930 [ 898.819651] alloc_pages_current+0xec/0x1e0 [ 898.823990] kvm_mmu_create+0xdf/0x1e0 [ 898.827891] kvm_arch_vcpu_init+0x29c/0x8e0 [ 898.832225] kvm_vcpu_init+0x272/0x360 [ 898.836128] vmx_create_vcpu+0xfc/0x2aa0 [ 898.840208] ? mutex_trylock+0x1c0/0x1c0 [ 898.844288] ? handle_rdmsr+0x6e0/0x6e0 [ 898.848290] ? wait_for_completion+0x420/0x420 [ 898.852887] kvm_arch_vcpu_create+0x8c/0xc0 [ 898.857224] kvm_vm_ioctl+0x501/0x1600 [ 898.861111] ? __lock_acquire+0x5f7/0x4620 [ 898.861122] ? find_held_lock+0x35/0x130 [ 898.861138] ? kvm_vcpu_release+0xa0/0xa0 [ 898.861147] ? trace_hardirqs_on+0x10/0x10 [ 898.861161] ? trace_hardirqs_on+0x10/0x10 [ 898.861170] ? __might_fault+0x110/0x1d0 [ 898.861180] ? save_trace+0x290/0x290 [ 898.861189] ? __might_fault+0x110/0x1d0 [ 898.861204] ? __fget+0x210/0x370 [ 898.869745] ? find_held_lock+0x35/0x130 [ 898.869759] ? __fget+0x210/0x370 [ 898.869770] ? kvm_vcpu_release+0xa0/0xa0 [ 898.869783] do_vfs_ioctl+0x7ae/0x1060 [ 898.913218] ? selinux_file_mprotect+0x5d0/0x5d0 [ 898.917988] ? lock_downgrade+0x740/0x740 [ 898.922154] ? ioctl_preallocate+0x1c0/0x1c0 [ 898.926574] ? __fget+0x237/0x370 [ 898.930038] ? security_file_ioctl+0x89/0xb0 [ 898.934453] SyS_ioctl+0x8f/0xc0 [ 898.937824] ? do_vfs_ioctl+0x1060/0x1060 [ 898.941978] do_syscall_64+0x1e8/0x640 [ 898.945874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 898.950735] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 898.955925] RIP: 0033:0x45af49 04:55:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) pkey_alloc(0x0, 0x3) [ 898.959115] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.966833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 898.974209] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 898.981485] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 898.988762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 898.996044] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 899.017052] warn_alloc_show_mem: 1 callbacks suppressed [ 899.017056] Mem-Info: [ 899.025331] active_anon:856102 inactive_anon:1746 isolated_anon:0 [ 899.025331] active_file:4479 inactive_file:5618 isolated_file:0 [ 899.025331] unevictable:0 dirty:37 writeback:0 unstable:0 [ 899.025331] slab_reclaimable:15693 slab_unreclaimable:126773 [ 899.025331] mapped:60129 shmem:1791 pagetables:27883 bounce:0 [ 899.025331] free:480240 free_pcp:393 free_cma:0 [ 899.071418] Node 0 active_anon:1882108kB inactive_anon:6900kB active_file:68kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215116kB dirty:0kB writeback:8kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 899.100417] Node 1 active_anon:1542380kB inactive_anon:84kB active_file:17848kB inactive_file:22468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25400kB dirty:124kB writeback:72kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 899.129876] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.167471] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 899.173582] Node 0 DMA32 free:34188kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:644kB local_pcp:404kB free_cma:0kB [ 899.214095] lowmem_reserve[]: 0 0 0 0 0 04:55:13 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') bind$netrom(r3, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) [ 899.225435] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 899.267052] lowmem_reserve[]: 0 0 0 0 0 [ 899.293110] Node 1 Normal free:1875312kB min:53508kB low:66884kB high:80260kB active_anon:1542328kB inactive_anon:84kB active_file:17848kB inactive_file:22492kB unevictable:0kB writepending:172kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20416kB pagetables:47000kB bounce:0kB free_pcp:980kB local_pcp:488kB free_cma:0kB [ 899.334707] lowmem_reserve[]: 0 0 0 0 0 [ 899.354065] Node 0 DMA: 3*4kB (ME) 14*8kB (UEH) 16*16kB (UMH) 6*32kB (UH) 5*64kB (EH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10492kB 04:55:14 executing program 4: eventfd2(0x80, 0x80000) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x81}) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001f7b88f083fb837dbd43ffffff95000059df1527fc1000000000000bf8f8c443c90000000000"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 899.401951] Node 0 DMA32: 27*4kB (UMH) 516*8kB (UMEH) 842*16kB (UMH) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34252kB [ 899.425012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 899.436982] Node 1 Normal: 217*4kB (UME) 161*8kB (UME) 175*16kB (U) 57*32kB (U) 30*64kB (U) 2*128kB (UM) 1*256kB (M) 7*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 452*4096kB (M) = 1876476kB [ 899.459509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 899.469258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 899.483002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 04:55:14 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x10, 0x0, 0x1}, &(0x7f0000000100)=0x7fffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) [ 899.508441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 899.537583] 11895 total pagecache pages [ 899.555236] 0 pages in swap cache [ 899.559299] Swap cache stats: add 0, delete 0, find 0/0 [ 899.570379] Free swap = 0kB [ 899.573526] Total swap = 0kB [ 899.576673] 1965979 pages RAM [ 899.584223] 0 pages HighMem/MovableOnly 04:55:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1ff, 0x5, [], &(0x7f0000000080)=0x9d}) [ 899.624019] 335871 pages reserved [ 899.627521] 0 pages cma reserved 04:55:14 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x50) 04:55:14 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x14, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="af11e75e0817343c83f0a9c56315eea3db25a5bb83cb9a6e13c8fedf82dc915449a75289f1d9928e63ce71afb62c3d71b851bd5230721a80fc6e69f49503378eb70d8f09a7c2e2be9ebd82192c369d3b"], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x863, 0x20}, &(0x7f0000000100)=0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, 0xffffffffffffffff, 0x0) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) [ 899.840111] net_ratelimit: 4 callbacks suppressed [ 899.840118] protocol 88fb is buggy, dev hsr_slave_0 [ 899.850114] protocol 88fb is buggy, dev hsr_slave_1 [ 899.855238] protocol 88fb is buggy, dev hsr_slave_0 [ 899.860348] protocol 88fb is buggy, dev hsr_slave_1 04:55:14 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x3, 0xfffffd1d) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r4, 0xd05}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:14 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="590f1b56498b50c2137d1c5fead494e3db53717b1752291da77ebaa4c131fc618689815d26c63361fc3dd60afa4b654564c295f70f77e7430520eb81398c0c15ac8f366b04b8061e7acc7b6f28575541398fc4a1822fb44a8891f411a59dbb4882688193d6c44026558cda6f4d227c96f1665268e910f82f4ee66cf52de69887b0d8453d4236306b09a0ba9f1a") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:15 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0xfffffffd, 0x80000001, 0x4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0xffffff29, 0x0, 0x6}, &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) [ 900.800118] protocol 88fb is buggy, dev hsr_slave_0 [ 900.805249] protocol 88fb is buggy, dev hsr_slave_1 04:55:15 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x4, 0x3, 0xffff0000}, &(0x7f0000000240)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x80}}, 0x10) get_robust_list(r2, &(0x7f00000004c0)=&(0x7f0000000480)={&(0x7f0000000440)={&(0x7f0000000400)}}, &(0x7f0000000500)=0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r2, r3, 0x0, 0x13, &(0x7f0000000080)='-/selinuxeth1eth1}\x00', r5}, 0x30) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:55:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc32, 0x10, 0x0}, 0x45) [ 901.040129] protocol 88fb is buggy, dev hsr_slave_0 [ 901.045307] protocol 88fb is buggy, dev hsr_slave_1 04:55:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000b9e8a796d102f635000063010000000000009500000000000093"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) migrate_pages(r0, 0x8000, &(0x7f00000000c0)=0xffffffff, &(0x7f0000000100)=0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) 04:55:15 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f00000000c0)=0xfffffffffffffff7) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) flistxattr(r5, &(0x7f0000000100)=""/79, 0x4f) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) [ 901.360100] protocol 88fb is buggy, dev hsr_slave_0 [ 901.365236] protocol 88fb is buggy, dev hsr_slave_1 04:55:16 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:55:16 executing program 4: r0 = creat(0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000340)={0x19f0008, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x4, [], @value=0x563}}) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000380)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000240)="db40951195b65329", 0x8) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r3, 0x0, 0xbe}, &(0x7f00000000c0)={'enc=', 'oaep', ' hash=', {'wp512-generic\x00'}}, &(0x7f0000000140), &(0x7f0000000240)="49788faf1503b4fae8bf7a6f9a6c072806787a5e845a3f0a61a85450d522853020310587720de3b60e4f615b538b27d6038d2fcdc6ff49865c40c6845abbc49ca848315695521d3379649652cfec858637744a1b6b683e84a63426915ec752fd09db38959dea54d033c5851c6d840e624f19ca28a643f2945c80b3182b4fc69d9323d5d2bdb3c1ae6f94fadaa584b0aa67ceab5def2494d03b841b58d9bab6cdd6edb4877dcdea0cf6dc62205368c0147e7161640d62690fa1260f08a0c7") ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000cc1d000000000000000063010000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:16 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x22040, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) fcntl$setown(r2, 0x8, r3) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0xdeb7c9159937f032, 0x70bd25, 0x25dfdbff, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r6, 0x0, 0x30005, 0x0) 04:55:16 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x256, 0x2a6c88e409137a97) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 04:55:19 executing program 4: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 04:55:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005800)={&(0x7f0000005880)=@newchain={0x56a8, 0x64, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xf}, {0x1, 0x10}, {0xfff3, 0x9}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x5658, 0x2, [@TCA_CGROUP_EMATCHES={0x1078, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xef80}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x1010, 0x2, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x8000, 0x0, 0x5a5}, "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"}}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0xe}, {0x7, 0x5, 0x5, 0x2, 0x9, 0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0x3d6c, 0x1, @m_pedit={0x3d68, 0x12, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x3d44, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, [@TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2b52fd9dff97984b}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x44, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x8a3c15b4a99d4037}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x80000001, 0x4b980b30, 0x7, 0xfffffffc, 0x200}, 0x3, 0x3, [{0x8, 0x0, 0x3, 0x0, 0xff, 0x1}, {0x2, 0x40, 0x9, 0x7, 0xffffffff, 0x8001}]}, [{0x76, 0x0, 0x97a, 0x1f, 0x5f, 0x3}, {0x2, 0x0, 0x8, 0x2, 0xffffffff, 0x8001}, {0xfffffff8, 0x1, 0x2, 0x1, 0x2, 0x4}, {0x6, 0x2, 0x3, 0x400, 0x40, 0x6}, {0x6635e167, 0x10001, 0x3, 0x4, 0x7, 0x1}, {0x7, 0x8, 0x5, 0x400, 0x4f47, 0x91}, {0x1, 0xdc0b, 0x5, 0x1000, 0x9, 0x5}, {0x1, 0x8001, 0x7, 0x22c, 0x3, 0x1000}, {0x0, 0x6, 0xffff, 0x401, 0xdc}, {0x9, 0x5f24, 0x70aa, 0x7, 0xffff5f74, 0x7}, {0x7fff, 0xffffffff, 0x1f, 0x0, 0xfffffffd, 0x9}, {0xee, 0xbc0, 0x1, 0x8, 0x40, 0x1}, {0x1, 0x4433, 0x100, 0x9, 0x0, 0x70}, {0xacfb, 0x0, 0x251, 0x4, 0x4, 0x6}, {0x81, 0x2, 0x8001, 0x9, 0x7, 0x2}, {0x7, 0x80000001, 0x5a, 0x20, 0xfffffbff, 0x6}, {0xfffffffd, 0x2f65, 0xee05, 0x1, 0x0, 0x6}, {0x6, 0xffffff00, 0xfffffffb, 0xfffff001, 0x4, 0x289}, {0xae7, 0x4, 0x3, 0x7fff, 0xfffffede, 0x1f}, {0x1, 0x7, 0x6c, 0x8, 0x100, 0x14}, {0x3, 0x9c, 0x5, 0xfff, 0x9, 0x5}, {0x4, 0x6, 0x400, 0x1000, 0x7f, 0x29}, {0x3, 0x8, 0x0, 0x5, 0x5c4, 0x1f}, {0x0, 0x0, 0x7f, 0x3, 0x5b, 0x8}, {0x5, 0x80000001, 0xffff77b5, 0xfffffffe, 0x5, 0xd1c}, {0xffffffff, 0x3, 0x3, 0x3, 0x3, 0xacb}, {0x25, 0xcc, 0x847, 0x7f, 0x8001, 0x80000000}, {0x5, 0x7, 0x4, 0x400, 0x0, 0x2}, {0x48000, 0x7, 0x3, 0x0, 0x9}, {0x100, 0x9, 0x7f1, 0x1, 0x2}, {0xfff, 0xfffeffff, 0x4b4, 0x8, 0x3, 0x62}, {0x200, 0x6, 0xffff, 0x5, 0x2, 0x800}, {0x10001, 0x4, 0x7fffffff, 0x9, 0x1, 0x100}, {0x7fff, 0x80000000, 0xd3, 0x4c4af8aa, 0x800, 0x5}, {0x2, 0xfe95, 0x0, 0x1000000, 0x9, 0x1}, {0x9, 0x20, 0xffffffff, 0x6, 0x1ff, 0x20}, {0x5, 0xd6, 0x2, 0x16f, 0x0, 0x7}, {0x1ff, 0x7, 0x2, 0x1, 0x7f, 0x6a8}, {0x1ff8, 0x2, 0x1000, 0x7ff, 0x7}, {0x8, 0x1, 0x8, 0x9a62, 0x10001, 0x1f}, {0x5, 0x6, 0x1, 0x5, 0x6, 0x7}, {0x3, 0x5, 0x4, 0x7fff, 0xff, 0x6}, {0x8, 0x7, 0x80, 0x81, 0x1113b19f}, {0x8, 0x8, 0x2, 0xff, 0x1ab, 0xfffffff7}, {0x9, 0x80000001, 0x6, 0x0, 0x401, 0x9}, {0x40, 0x3, 0x200, 0x3, 0x7, 0xffff0001}, {0x1ff, 0x4, 0x0, 0x0, 0x1, 0x7fffffff}, {0x4, 0x7, 0xffffffff, 0x3a, 0xffffffff, 0x8}, {0x2, 0x3ff, 0xffffff2e, 0x5d3, 0x1, 0xf8}, {0x0, 0x0, 0x0, 0x4, 0x7, 0x7fffffff}, {0x6, 0x0, 0x7fff, 0x8, 0x1ff, 0xfffffbff}, {0x8, 0x9, 0x0, 0x3, 0x6, 0x1}, {0xffff17d8, 0x5, 0x4, 0x5, 0x80000001, 0x200}, {0x2, 0x2, 0x2, 0x6, 0x2, 0x5}, {0x20, 0x1000, 0xffffffe0, 0x9, 0xff, 0xdd13}, {0x2, 0x5f520d47, 0x9, 0x6, 0x9, 0x576}, {0x6, 0xfffffffa, 0x5, 0x8, 0x7ff, 0x5}, {0x1ff, 0xfff, 0x4, 0x0, 0x101, 0x1f}, {0x2, 0x5, 0x80, 0x800, 0x0, 0x5}, {0x0, 0xffff, 0x7, 0x3, 0x5, 0x3}, {0x5, 0x80000000, 0x9, 0x80000001, 0x6a, 0x3}, {0x4, 0x7, 0xfffff9e0, 0x5, 0x7}, {0x479d, 0x2, 0x4, 0x7, 0x9, 0xc}, {0x1ff, 0x0, 0xfd, 0x1, 0xd3, 0x1}, {0x6, 0x9, 0x4, 0x401, 0x1000}, {0x5, 0x4, 0x1c22, 0x7fff, 0x1ff, 0x1f}, {0xffffffff, 0x1000, 0x81, 0xd1, 0x3f, 0x1}, {0xffffff7f, 0xedc, 0x800, 0x5, 0x80000000}, {0x40, 0x7dc1, 0x6, 0x4, 0x5, 0x81}, {0x8, 0x3, 0x50000000, 0x4, 0x0, 0x400000}, {0x400, 0x1ff, 0x4, 0x200, 0x3ff, 0x3}, {0x706c, 0x401, 0x2, 0xfff, 0x8, 0x2}, {0x8, 0x3, 0x2, 0x5, 0x7fff, 0x9}, {0x100, 0x90, 0xaa1, 0x4, 0x7, 0x2}, {0x7, 0x8001, 0x5, 0x80000001, 0x80, 0x2}, {0x1f, 0x7, 0x6, 0x5, 0xffff, 0x1000}, {0x40, 0x0, 0x80, 0x9dd, 0xa80, 0x5}, {0xffff, 0xfffffff9, 0x988, 0x7, 0xff}, {0x8, 0xff, 0x0, 0x7ff, 0x22, 0x8}, {0x4000000, 0x7ff, 0x9, 0x3, 0x5, 0xe9}, {0x4, 0x8001, 0x1ce, 0x482c, 0x3b35, 0x7}, {0x3, 0x1, 0x8, 0x40, 0x5, 0xfff}, {0x8, 0x1000, 0xffffff55, 0x1, 0x800, 0x6}, {0x8b, 0x5, 0x3, 0x7fee, 0x1}, {0x8, 0x2, 0xae1f, 0x401, 0x8, 0x7}, {0x7d7f, 0x0, 0xff, 0x5, 0x6, 0x2}, {0x8, 0x4, 0xde, 0x8, 0x0, 0x40}, {0xc2, 0x4, 0x4, 0x20, 0x2, 0x73fa}, {0x1, 0x81, 0xb1b, 0x9, 0x0, 0x9}, {0x38000, 0x9, 0x7fff, 0x5, 0x3, 0x7fffffff}, {0x6, 0x1, 0x5, 0x2, 0xfffffffd, 0x8}, {0xfa1, 0x3, 0x425, 0x10000, 0x20, 0x200}, {0x4, 0x9, 0x8, 0x4, 0x5, 0x8}, {0x1000, 0x100, 0x4c95, 0x400, 0x80, 0x4}, {0x6, 0x7, 0x3ff, 0xfffffffd, 0x8, 0x39f}, {0xec, 0x101, 0x8, 0x2, 0x5}, {0x80000001, 0x9, 0x5da, 0x314, 0x9, 0x1f}, {0x1ff, 0x7, 0x4, 0xffffffc1, 0xfff, 0x2}, {0x400, 0x9, 0xfffffffa, 0x2, 0x8001, 0x2}, {0x7, 0xa6d, 0x9, 0xeaf, 0x0, 0xfffffffa}, {0x672, 0x9, 0x9, 0x9, 0x7, 0x9}, {0xfff, 0x9, 0x8, 0x0, 0x4, 0x5}, {0x101, 0x3, 0x1f, 0x10001, 0x4, 0x4}, {0x67, 0x6, 0x67, 0xff, 0xb33, 0x200}, {0x7, 0x7ff, 0x5, 0x1, 0x7fff, 0x80}, {0x5b4e, 0x100, 0xfffffffe, 0x3, 0x100}, {0x7, 0x9, 0x9f8, 0xfffffffa, 0x6, 0x40}, {0x5, 0x3, 0x7ff, 0x3, 0x1000, 0x5}, {0x80000001, 0x3f, 0x3120f6d2, 0x8}, {0x100, 0x7, 0xd724, 0x5, 0x3, 0x94}, {0x4, 0x7fffffff, 0x8, 0xfffffffb, 0x1, 0x7}, {0x3, 0x2, 0xfff, 0x3, 0x2, 0x2}, {0x2, 0x6, 0x6, 0x5, 0x1, 0xffffffff}, {0x800, 0x1ff, 0x9, 0x8001, 0x5, 0xf6}, {0x8001, 0x5, 0x0, 0x8001, 0x506, 0x6}, {0x9, 0x80, 0x8, 0x100000, 0x3, 0x7}, {0x1ff, 0xeff1, 0x7, 0x7, 0x0, 0x3}, {0x1, 0x10001, 0x8, 0xa50, 0x8001, 0x4}, {0xd4b9, 0x90000000, 0xfffffffe, 0x5, 0x80, 0x1000}, {0x101, 0x5, 0x101, 0x6, 0x0, 0x6}, {0xc40, 0x4, 0x7ff, 0x9, 0x8, 0x7}, {0x6, 0x8, 0x101, 0xb5, 0x4, 0x733d}, {0x1ff, 0x1, 0x69c, 0x4, 0x6, 0x1}, {0x4800000, 0x972, 0xf12, 0x7, 0x7, 0x8}, {0x1f, 0x3b57, 0x400, 0x4, 0x0, 0x81}, {0x80000000, 0x72, 0x3, 0x0, 0x5d, 0x1}, {0xe71, 0x7, 0x6, 0xffffff80, 0x3, 0xfffffff8}, {0x8, 0x3, 0x7, 0x1, 0x2eb0}], [{0x5, 0x1}, {0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x1}, {0x3, 0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x2}, {}, {0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x7}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x8, 0x17a35dc72b8c424d}, {0x4, 0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x0, 0x2}, {}, {0x4}, {0x1}, {0x691b07aa3356b09, 0x1}, {0x5}, {0x4}, {}, {0x0, 0x2}, {0x1}, {0x1, 0x1}, {0x8, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x2}, {0x3}, {0x0, 0xc2b21779692d887c}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0xf}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x145ebcfde038a002}, {0x4, 0x1}, {0x4, 0x2}, {}, {0x3, 0x1}, {}, {0x2, 0x3}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x1}, {0x9, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x5}, {0x2}, {0x3}, {0x5, 0x3}, {0x4}, {0x2}, {0x2, 0x1}, {0x4, 0x93d4b874c6478d76}, {0x5}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x80, 0x3, 0x10000000, 0xf459, 0x9}, 0x6, 0x1, [{0x5, 0x5, 0x3b3, 0x64039b39, 0x874, 0x4}, {0xffffffff, 0x8, 0x130, 0x101, 0x8, 0x3}, {0x5, 0x4, 0x1, 0x7, 0x7785591d, 0x7}, {0x400000, 0x6, 0x200, 0x9, 0x6, 0xfffff73e}, {0x5b3, 0x800, 0x7, 0x6, 0x3f, 0x7}, {0x3, 0x574, 0x3, 0x8, 0x80, 0x8}, {0x1cb, 0x401, 0x8, 0x8000, 0x401, 0x8db4}]}, [{0x54, 0x7ff, 0x8, 0xfffffffa, 0x6, 0x5}, {0x0, 0x1, 0x2801, 0x4ca, 0xffff8001, 0x40000000}, {0x80000000, 0x9, 0x5, 0x1, 0x954, 0x1}, {0x2f, 0x10001, 0xfffffb2b, 0x80000000, 0x5, 0x7}, {0x1000, 0x9, 0x2, 0x2, 0xffffffff, 0x80000000}, {0x9, 0x4, 0x4, 0x7, 0xb8b0, 0x1f}, {0x19, 0x9, 0x3ff, 0x0, 0x3, 0xb7}, {0x1, 0x10001, 0x3f, 0x8, 0x29, 0x800}, {0x3ff, 0xffff12e3, 0x5, 0x0, 0x7, 0x1}, {0x2, 0xbf3e, 0x8, 0x8, 0xe626, 0xfffff3a1}, {0x5, 0xcb2, 0x0, 0x92, 0x8, 0x401}, {0x1ff, 0x7, 0x3, 0x3ff, 0x0, 0x4d3}, {0x8000, 0x7ff, 0x7, 0x29, 0xfffffff9, 0x9}, {0x7ff, 0xf5, 0x4, 0x200, 0x3, 0x2}, {0x4, 0x200, 0x6, 0x5, 0xcbf6, 0x20}, {0x2, 0x5, 0x1ff, 0x4, 0x4, 0x8}, {0x1, 0x4d4afa32, 0x6, 0x3, 0x7, 0x6}, {0x1, 0xdb, 0x7, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x6, 0x4, 0x3, 0x800}, {0x3f, 0x7fffffff, 0x80000000, 0xfffffffd, 0x2120, 0xff}, {0x80000001, 0x4, 0x7, 0xfffffff9, 0x800, 0x1000}, {0x5, 0x2f68fd04, 0x0, 0x4, 0xfffffc00, 0x80000000}, {0x6, 0x5, 0x7, 0x7fff, 0x7ff, 0x8001}, {0x9, 0x400, 0x3, 0xfffffff9, 0x10000}, {0x0, 0x4, 0x9, 0xfff, 0x7, 0x9f}, {0x80000000, 0x5, 0x5, 0x6b, 0x4}, {0x4, 0x2e7d, 0x7, 0x400, 0x4, 0x5}, {0x0, 0x5, 0x9, 0x400, 0x8, 0x22c}, {0x8, 0x1c0000, 0x7, 0x4, 0x7ff, 0x748ff3ec}, {0x6, 0x67333e81, 0x7, 0x1, 0x4, 0x1ff}, {0x8, 0x7, 0x1, 0x81, 0x5, 0xf}, {0x3, 0xff5, 0xef5c, 0xffff832c, 0x0, 0x147}, {0x272, 0x0, 0x10001, 0xffffffff, 0xadae, 0x6}, {0x8001, 0x3, 0x2, 0x7f, 0x8, 0x1}, {0x8, 0xbe1, 0x2, 0x2, 0x5, 0x4}, {0x5, 0x1, 0x6, 0x5, 0x4, 0xffffffff}, {0x4, 0x8, 0x1, 0x3f, 0x9, 0x7fffffff}, {0x40, 0x8, 0x6, 0x4, 0x3, 0x3}, {0x1, 0x0, 0x8001, 0x401, 0x200, 0x30}, {0x4, 0xffffffff, 0x7, 0xf3, 0x9, 0x8}, {0x0, 0x10001, 0x7fffffff, 0xfffff601, 0x3, 0xfffffffa}, {0x5, 0x1f, 0x5, 0x40, 0x7, 0x31ef}, {0x1, 0x0, 0x10001, 0x4, 0x3, 0x1f}, {0x4, 0x3ec4, 0x90, 0x100, 0x6, 0x3ff}, {0x2, 0x9, 0xff, 0x5, 0x7, 0x3ff}, {0x80, 0x5, 0xe, 0xc49, 0xb90}, {0x4, 0xfff, 0x100, 0x10000, 0x1f, 0x6}, {0x10, 0x7, 0xfa4, 0x4, 0x8fd, 0x1}, {0x5, 0x401, 0x5, 0xaeab, 0x100000}, {0x200, 0x5, 0x3ff, 0x40, 0x800, 0x1}, {0x4, 0x4c, 0x1, 0x1000, 0x7f, 0xfffffff8}, {0x4, 0x9, 0x5, 0x45, 0x20, 0x6}, {0xffffff20, 0x6, 0x5, 0x10000, 0x992, 0x9}, {0x1f0e, 0x1, 0x4, 0x7ff, 0x5, 0x1f}, {0xee, 0x6, 0x9, 0x400, 0x6, 0x36f0fa4e}, {0x9, 0x4, 0xff, 0x48, 0xf95, 0x4}, {0x4, 0x1, 0xfffffff7, 0xff, 0x101, 0x12}, {0xffff, 0x1f, 0x9237, 0x6, 0x181d}, {0xd6, 0x8, 0x7, 0x1, 0x1, 0x8}, {0x0, 0x100, 0x3, 0x401, 0x7, 0x6}, {0x401, 0x81, 0x2, 0x20, 0xc9039cc, 0x1000}, {0x977, 0xaa7, 0x0, 0x400, 0x0, 0x251}, {0x1, 0x8, 0x1f, 0x81, 0xbf, 0x30a}, {0x1, 0x4, 0x40, 0x343, 0x80b, 0x2}, {0x0, 0x0, 0x800, 0xfffffffd, 0x2, 0x7ff}, {0x3a77, 0x9, 0x80000001, 0x2, 0x800, 0x7fffffff}, {0x3, 0x4, 0xfffffffd, 0x4, 0x3f, 0x5}, {0xd92, 0x20, 0x3, 0x4, 0x7ff, 0x1}, {0x5, 0x9, 0x7, 0xce3e, 0x40, 0x100}, {0xa5, 0xff, 0x81, 0x8, 0x401, 0x4}, {0x7, 0x0, 0x8001, 0x0, 0x4, 0x5}, {0xa7cd, 0xffff, 0x1f, 0x7, 0x0, 0x200}, {0x3, 0x1ff, 0x4, 0x6, 0x8, 0x9}, {0x5, 0x5, 0x1, 0x9, 0xf043, 0x2}, {0x7ff, 0x7, 0x5, 0x3, 0x4}, {0x2, 0x5, 0xffffffff, 0x800, 0x0, 0xfffffffd}, {0x8aeb, 0x1000, 0x5, 0xece5, 0x6, 0x10001}, {0x0, 0xffffffff, 0x401, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x6, 0xdf24, 0x1ff, 0x2}, {0x25d6, 0x6, 0x5, 0x0, 0x7ff, 0x9}, {0x3, 0xfffffffe, 0x81, 0x3, 0x2, 0xcf3}, {0xc00000, 0x2, 0x10000, 0x0, 0xb1c, 0xf82}, {0xe0d3, 0xfff, 0xfffff8a7, 0x7, 0xffffe000, 0x2}, {0xcc4, 0x4f, 0x3, 0x401}, {0x80, 0x80000000, 0x10001, 0xffff0000, 0x3f, 0x800}, {0x7, 0xfd9, 0x4, 0x4, 0xfff, 0x6}, {0x8, 0x9, 0xff, 0x1e00, 0x2}, {0xe8, 0xfff, 0x1, 0x4, 0x6, 0x9}, {0x9, 0x7, 0x9, 0x8, 0x9, 0x8d6}, {0x9, 0x1, 0xd769ed52, 0x61f4, 0x6, 0x40}, {0x5, 0x8001, 0x200, 0x6d, 0x400, 0x80000001}, {0xc84, 0x0, 0x2, 0x2, 0x2dd1, 0x5}, {0x6, 0x20, 0x101, 0x80, 0x10000, 0x6}, {0x1f, 0x3, 0x2, 0x72, 0x1f, 0x4}, {0x9, 0x6, 0x100, 0x0, 0x7f, 0x1}, {0x4, 0x1, 0x18, 0x80000001, 0x833, 0x9}, {0x0, 0x4f, 0x9, 0x0, 0x2, 0x6}, {0x2, 0x8, 0x1, 0x7, 0x9, 0x3}, {0x6, 0x0, 0x3f73, 0xfffffff8, 0x81, 0x2}, {0x20, 0x7, 0x36a, 0xfffffff7, 0x9, 0xffff}, {0x22, 0x80000001, 0x5494, 0x7, 0x4, 0x7}, {0x0, 0x7fff, 0x200, 0x7fffffff, 0x0, 0x1}, {0x0, 0x1, 0x7, 0x2, 0x99, 0x7}, {0x9, 0xe2bf, 0x0, 0x9, 0xfffffffa, 0x7}, {0x9, 0xe9, 0x4, 0x5, 0x3ff, 0x5}, {0x2, 0x1000, 0x9b5, 0x3, 0xd68, 0x80}, {0x41c, 0x3, 0x101, 0x9, 0x8, 0x1}, {0x9, 0xfffffffa, 0x7ff, 0x7, 0x4, 0x54}, {0x7, 0x10001, 0x3, 0x3ff, 0x3ff, 0x4}, {0x5, 0x400, 0x1, 0x1, 0x4, 0x2}, {0x8, 0x2, 0x1000, 0x6, 0x5, 0x9}, {0x8, 0x322, 0x2, 0x6, 0x3, 0xffffffff}, {0x4, 0x101, 0x3, 0x1, 0x0, 0x7}, {0xc00, 0x8, 0x40, 0x80, 0x4, 0x8000}, {0xfffffffb, 0x21, 0x8, 0x9, 0x5, 0x47f3}, {0x4, 0x2, 0x6, 0x252, 0x1, 0x3}, {0x3f, 0x5, 0xbed8, 0x401, 0x90, 0x3f}, {0x5078, 0x9, 0x6, 0x0, 0x800, 0xe92}, {0x11, 0x9, 0x0, 0xc9, 0x4, 0xc3}, {0x20, 0x7b7, 0x2, 0x3, 0x3, 0x8}, {0xcbf, 0x40, 0x9, 0x1ac7fb8a, 0x1, 0x3}, {0x8001, 0x5, 0x80000001, 0x7895, 0x0, 0x80}, {0x8, 0xc13931b8, 0x8, 0x7, 0x800, 0xc8}, {0x3, 0x80000000, 0x401, 0x10000, 0x1ff, 0xe48}, {0x3ff, 0x6, 0x1, 0x4, 0x5, 0x6e}, {0x4, 0x8, 0x32db9b50, 0x4, 0x8, 0x800}, {0x4, 0x6, 0x0, 0x568, 0x30, 0x8}, {0x5, 0x4cc9, 0x7f, 0xb045, 0x101, 0x1f}], [{0x3, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {0x74a8d44d21b42378, 0x1}, {}, {}, {0x1}, {0x4}, {0xc, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xa4b150ed0f7243df}, {0x1, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6c4ab31599520fec}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0xa28abdec363a80f5}, {0x5, 0x1e4de15dafb31443}, {0x2}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x2809fe90245d945a}, {0x5, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x7ccc2056e2d25225}, {}, {0x2, 0x2}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x685fc67ef16bd114}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0xb, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x2, 0xf20440b01d79644f}, {0x3}, {0x2, 0x3b83958806f1ba3b}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x64, 0x5, [@TCA_PEDIT_KEY_EX={0x4c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x10c, 0x5, [@TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x44, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x247c6d8006cf3535}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, @TCA_PEDIT_KEY_EX={0x54, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x3c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x6a246bc0b1178fe0}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xfff, 0x6, 0xffffffffffffffff, 0x7, 0x7}, 0x7f, 0x1, [{0x7, 0xad92, 0x8, 0x6, 0xfffffca0, 0x27}, {0x8, 0xffffffff, 0xeb92, 0x6, 0x7e6, 0x9}, {0x4, 0x6, 0x5, 0x83, 0x20, 0x98}, {0x2, 0x9, 0x0, 0x2, 0x1, 0x7fffffff}, {0x7, 0x2, 0x9, 0xffff, 0x9, 0x6}]}, [{0x0, 0xbe, 0x1db80000, 0x5, 0x490, 0x2}, {0xfffffffe, 0x10000, 0x6, 0x4, 0x30, 0x101}, {0x4, 0x8, 0x9, 0x1000, 0x80, 0x9}, {0xcf6, 0x3, 0x1, 0x800, 0x2, 0x401}, {0x401, 0x6fc50720, 0x5, 0x6, 0xffff0000, 0x1}, {0x81, 0x7f, 0x101, 0xffffffc0, 0xffff, 0x2}, {0x9, 0xfffffffd, 0x2ec, 0x8, 0x8, 0x137f329f}, {0x4, 0x6532, 0x3, 0x4, 0x0, 0x6}, {0x0, 0x9, 0x81, 0x2e1, 0x8, 0x4}, {0x4, 0x4, 0x914, 0x2, 0x9}, {0x6, 0x7, 0x800, 0x3f, 0x400, 0x4}, {0x85, 0xffffff9f, 0x6, 0x1, 0x200, 0xf669}, {0x4, 0x10000, 0x99d, 0x36, 0x400, 0x3}, {0x7, 0x80000, 0xda, 0x101, 0x100, 0x8}, {0x7, 0x7, 0x100, 0x1}, {0x4, 0x100, 0x3f, 0x101, 0x3, 0x8001}, {0x2, 0x4, 0x3ff, 0x10001, 0x5, 0x2}, {0x0, 0xf5, 0x100, 0x2, 0xffff, 0x80000000}, {0x7ff, 0x7fffffff, 0xa0, 0x800, 0x0, 0x3}, {0x8, 0xf2, 0x3, 0x8, 0x963, 0x3}, {0x68, 0x401, 0x0, 0xb856, 0xfffffffc, 0x10000}, {0x4, 0x80, 0x4, 0x5, 0x80, 0x200}, {0xffffffff, 0x800, 0x0, 0x8000, 0xad, 0xcd52}, {0x85a5, 0x10001, 0x81, 0x1}, {0xc0db, 0x1, 0x0, 0xba9}, {0x80000001, 0x7f, 0xd7, 0x8, 0x1, 0x8001}, {0x0, 0x101, 0x58d2, 0x800, 0x1000, 0xffff0000}, {0x1, 0x6, 0x7, 0x9, 0xffffffe0, 0x5}, {0x10001, 0xfffffffa, 0x9, 0xfffffffc, 0x6, 0x8}, {0x32, 0x40, 0xfffffff8, 0x5, 0x80000001, 0xffff}, {0x6, 0x80, 0xfffffffe, 0x0, 0x9, 0x9}, {0x400000, 0x5, 0x2, 0xef300, 0x2, 0x9}, {0x2eae, 0x441, 0xde, 0x101, 0xfffffffe, 0x5f5}, {0xfdd0, 0x3, 0x2, 0x1, 0x8}, {0x3, 0x3ff, 0x9, 0x100, 0xb2, 0x8}, {0x400, 0x6, 0x9, 0x7, 0x5, 0xe1a}, {0x0, 0x3, 0x5, 0x8, 0x1, 0xa2f}, {0x1f, 0x8, 0x9, 0x1000, 0x8, 0xfffffeff}, {0x2, 0x101, 0x5, 0x9, 0x81, 0x6}, {0x10000, 0x1, 0xffffff81, 0x1, 0x1, 0x5b}, {0x0, 0x400, 0xffff0001, 0x7fffffff, 0x3f, 0xffff}, {0x80000000, 0x0, 0x3, 0xfffff801, 0x0, 0x2}, {0x1, 0x7, 0x0, 0x200, 0x2, 0x7}, {0xffff, 0x4, 0x9, 0x1, 0x80000000, 0x3d31f5}, {0x1ff, 0x2, 0x8, 0x5, 0x2, 0x5}, {0x9, 0x8, 0xdc4, 0x267b, 0x200, 0x8}, {0x9, 0x7, 0x2fd, 0x2, 0x0, 0x5}, {0x0, 0x3, 0x2, 0x8, 0x100, 0x7}, {0x9, 0x6, 0x81, 0xffff, 0x0, 0xffffffff}, {0xf87, 0x5, 0x2, 0x988, 0x7, 0x7fff}, {0x0, 0x4, 0x96a, 0x9031, 0x1, 0xfffffff7}, {0x400, 0x2, 0x99d6, 0x9, 0x2, 0x8}, {0x8000, 0x1, 0x4, 0x0, 0x1ff, 0x3d0}, {0x3, 0x915, 0xfffffff8, 0x3, 0x1000000, 0x81}, {0x62e2ca6c, 0x49, 0x10000, 0x7fffffff, 0xaa, 0x3f}, {0x3f, 0x7fff, 0xff, 0x20, 0x2, 0x2}, {0x65, 0x8, 0x5, 0xfffffffd, 0x6}, {0x80, 0x7fff, 0xfffffff7, 0x1, 0x7fff, 0x4}, {0x6, 0x7067, 0x7, 0x9, 0x3}, {0x38, 0x1ff, 0x9, 0x10000, 0x3, 0x101}, {0x9, 0x9, 0x8, 0x8, 0x0, 0x1ff}, {0x7fffffff, 0x5, 0x8000, 0xb05d, 0x101, 0x9}, {0x7, 0xff, 0xdb, 0x100, 0x8, 0x7}, {0x9, 0x81, 0x80, 0x3ff, 0xffffffff, 0x4}, {0x6f4, 0x9, 0x8, 0x200, 0x6, 0x401}, {0x2b0fcfb4, 0x3f, 0x0, 0x0, 0xd9, 0x3}, {0x1, 0x9, 0x1000, 0x8, 0x1}, {0x3, 0x401, 0x0, 0x200, 0x0, 0x5}, {0x4, 0xfffffff9, 0xfed000, 0x2, 0x40, 0x5}, {0x6, 0x75, 0x0, 0x7, 0x1, 0x9}, {0x8, 0x400, 0x9, 0xff, 0x0, 0x1}, {0x158a, 0x7, 0x3ff, 0x9, 0x2, 0x3}, {0x8, 0x7fffffff, 0x5, 0x1, 0x6, 0xc7}, {0x10000, 0x8, 0x7fff, 0xaf47, 0x724, 0xffff4b11}, {0x40, 0x3, 0x6, 0x1000, 0x7fff, 0x7}, {0x13012816, 0x3ff, 0x0, 0x32, 0xfff}, {0x1, 0x8, 0x5, 0xd, 0x20, 0x4a}, {0x2, 0x7fff, 0x8, 0x80000000, 0x7, 0x3}, {0x5, 0x9, 0x10000, 0x81, 0x1ff, 0x9}, {0x827, 0x7fff, 0xffffffff, 0x1, 0x3, 0xb35a}, {0x5a49, 0x8000, 0x0, 0xfffffff7, 0x4, 0x1}, {0xfff, 0x101, 0x7fff, 0x9, 0x4}, {0x1f, 0xe0, 0x1, 0x4, 0xfffffffc}, {0x10001, 0xffff, 0x2, 0x7, 0x3, 0xfffff001}, {0x4, 0x2, 0x1000, 0x8001, 0x9, 0xfffff001}, {0x5, 0x7, 0xc3, 0xf0d7, 0x7, 0x1000}, {0x8, 0x7f, 0x2, 0xfff, 0x7, 0x7fffffff}, {0xe6a, 0x8687, 0xfff, 0x0, 0x6, 0x71}, {0x4, 0xfffffffa, 0x9, 0xdc, 0x8, 0x9}, {0x7f, 0xd0, 0x20, 0x784c, 0x3, 0x9}, {0x9, 0x1f, 0x53ab74e3, 0x2, 0x5, 0x3}, {0x5, 0x7, 0x9, 0x1, 0x80000001, 0x7}, {0xa520, 0xffffffff, 0x0, 0xfffffffc, 0x10534c38, 0x7}, {0x3, 0x3, 0x3ff, 0x40004000, 0x0, 0x401}, {0x6699, 0x800, 0x1, 0x0, 0x9, 0x3}, {0x8cd, 0x7ff, 0x5, 0x200, 0x3cc4, 0x1}, {0x36c3c73c, 0x8, 0x8001, 0x1c0, 0x4980, 0xaad9}, {0x3, 0xf6, 0x81, 0x80, 0xfffffe01, 0x7ff}, {0x2a7, 0xc3, 0xd576597, 0x4226, 0x8, 0xb538}, {0x71c, 0x90, 0x0, 0x8, 0x1f, 0x368d2cb4}, {0x3, 0x7, 0x1, 0xffffff63, 0x1, 0x10001}, {0x1c, 0x6ad, 0xfffffe01, 0x800, 0x2}, {0xff, 0x6, 0x447, 0x7, 0x38, 0x7f}, {0x6, 0x7, 0x80, 0x4, 0x1, 0x9}, {0x8, 0x7f, 0x5, 0xfffffff7, 0x4}, {0xe6, 0x4, 0x6, 0x7, 0x1, 0x7}, {0x400, 0x0, 0x8001, 0xba, 0x80000001, 0x4c}, {0x80, 0x4, 0x1ff, 0x1fda697a, 0x2, 0x1}, {0xfff, 0x7, 0x101, 0xff, 0x4, 0x6cf447bf}, {0x9, 0x91, 0x200, 0x80000001, 0x1, 0x8}, {0xbd, 0x800, 0x8000, 0x2, 0x8, 0x4}, {0x9be, 0x2, 0x2, 0x58d, 0x7f, 0x1073}, {0x3, 0x10000, 0x5, 0x7, 0x3f, 0x8}, {0x80000001, 0x2c, 0x400, 0x8, 0x8, 0x1b}, {0x6, 0x101, 0xfffff8b8, 0x698, 0x0, 0x7158}, {0x991, 0x0, 0x8, 0x10001, 0xa1, 0x1f}, {0xff000000, 0x7fff, 0x8000, 0xffffffff, 0xfffffffa, 0x80000001}, {0xae5f, 0x3, 0x8000, 0xa15, 0x69b, 0x7fff}, {0x1, 0x3, 0x7, 0x800, 0x7, 0xc0000000}, {0x3, 0x1ff, 0x4, 0x1, 0x9, 0x78b2}, {0x8, 0x5, 0x3e5d, 0xffffff81, 0x1, 0x7ff}, {0x3, 0x101, 0x400, 0x5, 0x7, 0x1f}, {0x8, 0x10001, 0x1ff, 0xffffffe1, 0x40, 0x4}, {0x3, 0x7, 0x0, 0x2, 0x9, 0x4}, {0x9, 0x1, 0x2, 0x0, 0x1, 0x9}, {0x101, 0x9, 0x200, 0x6, 0xffff951d, 0x5}, {0xfffffffd, 0x6, 0x2, 0x1ff, 0x0, 0x12}, {0x2, 0x9, 0x2, 0x200, 0x11, 0x2}], [{0x2}, {0x2}, {0x2}, {0x3}, {0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x9f0f25d05de81675}, {0x1}, {0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x1}, {0xc3e5b2ecb8594870, 0x2}, {0x1}, {0xea24cb6a386a2a9e}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x3}, {}, {0x2}, {0x4da973da51f4f7c6, 0x1}, {0x3}, {0x7, 0x1}, {0x0, 0x2}, {}, {0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0xf3f8242f8e3a7d47}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0xb1f97cb467130c69}, {0x0, 0x3}, {}, {0x3}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x2}, {0x4}, {0x2}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x68f5ddf8d94f212}, {}, {0x0, 0x1}, {0x1}, {0x5}, {0x2}, {0x5}, {0x5, 0x52dbceb05e2ce2e1}, {0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3}, {0x1}, {0xfd7491f3abb50188}, {0x5}, {0x5}, {0x1}, {0x5}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x4}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0xe4, 0x5, [@TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, @TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x99671596a4331b7d}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x800, 0x2, 0x0, 0x40, 0x1}, 0x1, 0x8, [{0x1, 0x7, 0x3f, 0x0, 0xffffffff, 0x2}, {0x8, 0x4, 0x9, 0x9, 0x0, 0x10000}, {0x31d6, 0x6, 0x1f, 0x2, 0x2, 0x8}, {0x0, 0x8, 0x45f9, 0x7, 0x5, 0x3adf}]}, [{0x401, 0xefa, 0x404, 0x8, 0x9, 0x200}, {0x3ff, 0x3, 0x8, 0x80000001, 0x0, 0x1}, {0x0, 0x6, 0xfffffffb, 0x40, 0x0, 0x9}, {0x3, 0x5, 0xf0, 0x5, 0x4, 0x4}, {0x9, 0x10000, 0x6, 0x8, 0x4, 0x80000001}, {0xffffffff, 0x8, 0x800, 0xfffffede, 0x10000, 0xffff}, {0xfffffc49, 0x5, 0x7fff, 0x1, 0x8}, {0x9, 0x9, 0x7f, 0x3ff, 0xfffffff8, 0x5ff9}, {0x7, 0x81, 0x3ff, 0xfffffc01, 0x7, 0x1f}, {0x3, 0x0, 0x3, 0x9, 0x2, 0x40}, {0xfffffffe, 0x4, 0xb90, 0xfffffffc, 0x0, 0xffffffff}, {0x2, 0xffffffff, 0x7, 0x1, 0x38, 0x3}, {0x2f, 0x6, 0x401, 0x1, 0x3ff, 0x24}, {0x459e, 0x94dc, 0xffffffff, 0x8, 0x7f, 0x8}, {0x79ae, 0x8, 0xffffffff, 0x7fff, 0x9}, {0x7f, 0x396, 0x8, 0x5, 0x484d, 0xfffffffe}, {0x3, 0x9, 0x4, 0x5, 0x6, 0x80}, {0x3ff, 0x8, 0xffffff63, 0x1, 0x1, 0x1ff}, {0xe1, 0x2, 0x8000, 0x8, 0x2, 0x4}, {0x4, 0x1, 0x358ab856, 0x9, 0x9, 0x8}, {0x1, 0x8, 0x6, 0xffffffe0, 0x5ed4794f}, {0x6, 0x1, 0x4, 0xcd, 0x81, 0xc7}, {0x3, 0x1, 0x81, 0x80000001, 0xc30, 0x3}, {0x1f, 0xba1, 0x43742a0, 0x80000001, 0x200, 0x4}, {0x1ff, 0x8, 0x7, 0x0, 0x9, 0x2}, {0x2, 0x6, 0x101, 0x1, 0xffff288d}, {0x4, 0x1, 0x80, 0x111, 0x20000, 0x20}, {0x6, 0xc65, 0xfff, 0x9, 0x3ff, 0x6}, {0x6, 0x6, 0xfffffff7, 0x6cc, 0x0, 0xc9a}, {0x3ff, 0x7, 0x5, 0x3b, 0x4, 0x61f}, {0x0, 0x8001, 0x9, 0x9, 0x9}, {0x401, 0x80000001, 0x100, 0x3, 0x0, 0x81}, {0x10001, 0x20, 0x9, 0xf40, 0xbc1, 0x6}, {0x8f08, 0x1, 0x63, 0x3, 0x100, 0x1}, {0x4, 0x3, 0x9, 0x7f2, 0x8, 0x4}, {0x893b, 0x9, 0xff, 0x200, 0x7}, {0x4, 0x7, 0x200, 0x40000000, 0x400, 0x2}, {0x2, 0xde, 0x9, 0x4, 0x3, 0x9}, {0x8, 0x0, 0x2, 0x0, 0x5, 0x6}, {0x5, 0x10000, 0x0, 0x0, 0x0, 0x1}, {0xffffff81, 0x400, 0x9, 0x4, 0x6, 0x3}, {0x12ce, 0x10, 0x49fbe084, 0x200, 0x2, 0x2}, {0x1, 0x80000001, 0x2, 0x40000, 0xf0f, 0x5}, {0x4, 0xfffffffb, 0x6, 0x9}, {0x400, 0xffffffe1, 0x4, 0x4, 0x0, 0x7ff}, {0x3, 0x5, 0x1000, 0x2b1, 0x3, 0x8001}, {0x0, 0x1, 0xff, 0x1, 0x5, 0x81}, {0x4, 0x8, 0x9, 0x5, 0x0, 0x2}, {0x6, 0x1f, 0x7, 0xfffff850, 0x6, 0x7}, {0x1, 0xa8, 0x0, 0x2, 0x10001}, {0x8001, 0x7ff, 0x4a43a5bb, 0x2, 0x3, 0x4}, {0x1ff, 0x0, 0x80000000, 0x7fff, 0x5, 0x1}, {0x5e8, 0x3, 0xc88, 0x0, 0x7, 0x1}, {0x5, 0xffffba02, 0x7, 0xffffffff, 0xdbd, 0x6}, {0x8, 0x8000, 0x1, 0x8, 0x2, 0x3}, {0x6, 0x3e4a, 0x7f, 0x8001, 0x0, 0x2}, {0x0, 0x820, 0x401, 0x7, 0x8000, 0x5}, {0xfffffffb, 0xffffffff, 0x9, 0x1, 0x101, 0x3}, {0x8, 0x80000001, 0x41e, 0x9, 0x9d9, 0x1000}, {0x9, 0x800000, 0x8000, 0xfffffff9, 0xa72f}, {0x1, 0x4, 0x6, 0x2e, 0xaaf, 0x8000}, {0xea8, 0x6, 0x2, 0xffff, 0x8, 0x1}, {0x80000001, 0x868, 0x5, 0x7, 0x3ff, 0x4}, {0xcf4f, 0x80000000, 0x1000, 0x4, 0xc2bb, 0x1}, {0x3, 0xfffffff7, 0x6, 0xd9ed, 0x9, 0xd99}, {0x6, 0x20, 0x143, 0x2, 0xca, 0x4}, {0x0, 0x7, 0x2, 0x67, 0xc0}, {0xfffffffa, 0x1, 0x1, 0x7c, 0x5, 0x1}, {0x7a, 0x40, 0x40, 0x200, 0x5}, {0x3, 0x4010, 0xfffffbff, 0x0, 0x1ff, 0x1}, {0x0, 0x7, 0x0, 0x2282, 0x421c, 0x5}, {0x4, 0x8, 0x5, 0x7ff, 0x7, 0x1000}, {0x1000, 0x9c1, 0x3, 0x4, 0x7, 0x5}, {0x971, 0x7fffffff, 0x3ff, 0x0, 0x2}, {0x3, 0x47, 0xa8dd, 0xecc5, 0x100, 0x3}, {0x6, 0x2, 0x8000000, 0x1, 0x3, 0xa00000}, {0x8, 0x401, 0x4, 0xda29, 0x4, 0x81}, {0x80000000, 0x5, 0x2, 0x3, 0xbdc7, 0x2}, {0x426, 0x5, 0x1, 0x2, 0x2, 0x8}, {0x5, 0x6fec, 0x200, 0x9, 0xba, 0x8}, {0xfb7, 0xfb, 0x69, 0x8, 0x56, 0x9}, {0x5, 0x10000, 0x77ce4ca3, 0x8000, 0x28, 0x1000000}, {0x80, 0x800, 0xa8, 0x9, 0x1, 0x1d1}, {0xa463, 0x1, 0x1000, 0x5, 0xf52, 0x8}, {0x80000000, 0x1, 0x80000000, 0xffffffff, 0x20, 0x3}, {0x100, 0x8, 0x2d, 0x0, 0x40, 0x3}, {0x7, 0x9, 0x0, 0x24000000, 0xffffffff, 0x99}, {0x9, 0x2, 0x7, 0x9, 0x80000000}, {0x7ff, 0x1f, 0x1f, 0xbca8, 0xb83, 0x7}, {0x4, 0x688, 0xfffffffa, 0x40, 0x5, 0x80}, {0x7fff, 0x1, 0x40, 0x9, 0x9}, {0x1, 0x81d0, 0x1000, 0x4, 0x10000, 0x5}, {0x7, 0x681, 0x81, 0x8001, 0xffff, 0x8000}, {0x3, 0x3, 0x200, 0x10000, 0x6f, 0x8221}, {0x3, 0x4, 0xaafa, 0x16, 0x80, 0xffff}, {0x1, 0xbf16, 0x200, 0x9, 0x2, 0x7f}, {0x6, 0x6, 0x3, 0x5, 0x1, 0x5}, {0x4, 0x200, 0x9, 0x4d, 0x3, 0x9}, {0x40, 0x3999d847, 0x1, 0x8, 0x200, 0x3}, {0x10000, 0x5, 0x4, 0x1f, 0x6, 0x3}, {0x1ff, 0x0, 0x40, 0x1, 0xffff, 0x5}, {0x8, 0x7, 0x375, 0x101, 0x400, 0xe091f2d3}, {0x1, 0x1ff, 0x4, 0xfffffffc, 0x10001, 0xfff}, {0x9, 0x1ff, 0x2, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x9, 0x7, 0xfffffff7, 0x1}, {0x656, 0x5, 0x7fff, 0x4, 0x305, 0x6}, {0x4, 0x48c, 0x3ff, 0x5, 0x8, 0x800}, {0x2, 0x5, 0x5, 0x2, 0x6, 0x3}, {0x113a598, 0x7, 0x9, 0x51, 0x7fffffff, 0x8}, {0x2, 0x7, 0x200, 0x6, 0x5, 0xc39}, {0x8, 0x2, 0xcb, 0x1ff, 0x84, 0xa8}, {0x8, 0x2, 0x9, 0x7f, 0x7}, {0x2, 0x7f, 0x2c5, 0x2, 0x3, 0xb33}, {0x8, 0x1, 0x6, 0x8000, 0x7, 0x1781}, {0x9, 0x9, 0x5, 0x1, 0x2, 0xffff7fff}, {0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0xa69}, {0xffffffff, 0x8, 0x1f, 0x4, 0xed51, 0x1}, {0x2, 0x2, 0x4, 0x0, 0x577, 0x9}, {0x6, 0x1, 0x4, 0x0, 0x2, 0x7}, {0x2e73, 0x20000000, 0x8, 0x1, 0x6, 0x5}, {0x0, 0xffff, 0x2, 0x426c, 0x9, 0x100}, {0x67e, 0x4, 0x3, 0x1f, 0xfff, 0x9}, {0x80000000, 0x2, 0x3ff, 0x1000, 0x200, 0x4}, {0x0, 0x800, 0x4, 0x2, 0x9, 0xfff}, {0x7fffffff, 0xaf3c, 0x81, 0x7fff, 0x7fff, 0x9}, {0x0, 0xcb, 0x0, 0x4, 0x9, 0x7}, {0x400, 0x1f, 0x1f, 0x81, 0x3, 0x2}, {0x4, 0x6, 0x6, 0x9, 0x9, 0x2}], [{0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x3, 0xc5abcbb160f4f274}, {0x0, 0x3}, {0x0, 0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x3}, {0x1, 0x2}, {0x5}, {0xdaa7c06558980157, 0x1}, {0x4}, {0x8, 0x1}, {0x0, 0x1}, {0x5, 0xb16c99a9e7bb7b2}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8, 0x1}, {0xda41a3c375844848, 0x1}, {0x2}, {0xf355d7eceba4c605}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5}, {0xc9b3dd17155b5688, 0x2}, {0x3, 0x2}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0xd, 0x1}, {0x1}, {0x5}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x38f8b88465788974}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {0x1}, {0x4}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x3}, {0xa212789f49b7c473}, {0x3}, {0x1}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x2c62de7ff6f4e99e}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1, 0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0xe4c25ab5ac1b845e}, {0x6, 0x1}, {0x2}, {0x5}, {}, {0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x2}, {0xc}, {0x5}, {0x3, 0x1}, {0x5}], 0x1}}]}, {0x14, 0x6, "100fa2b8ebeebea0c4fb8d47ec96a0dc"}}}}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8, 0x4, 0x400, {0x3, 0x0, 0x9, 0x200, 0x2, 0x1f}, {0x1, 0x3, 0x3, 0x81, 0xb7ce, 0x2a42}, 0x2, 0x6b3e, 0x6}}}, @TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0xf0c, 0x81, 0x89ff, 0xf38, 0x200, 0xfff, 0x7f, 0x8, 0x2, 0x9, 0xfffffff7, 0x2, 0x0, 0xfffffff8, 0xfffffffa, 0x408b, 0x6, 0x1f, 0x1, 0x2, 0x20, 0x100, 0x3, 0xff, 0xfffffffb, 0x7, 0xfff, 0xfffffac7, 0x0, 0xda, 0x6, 0x101, 0xfe27, 0x10000, 0x7, 0x0, 0x8, 0x80, 0x0, 0xffffffff, 0x7ff, 0x1, 0x9, 0x7ff, 0x7d5, 0x1, 0x2, 0x401, 0x6, 0x9, 0xa51, 0x74, 0x10000, 0x0, 0x8, 0x7ff, 0x200, 0x5, 0x7fff, 0x6, 0x39b, 0x800, 0x10000, 0xfff, 0x3, 0x3f, 0x20, 0xc3c0, 0x3f, 0x1f, 0x3, 0x5, 0x9, 0x7, 0x7fff, 0xfffffff7, 0x84f4, 0xe8, 0xfffffbff, 0x1, 0x400, 0x1, 0xff, 0x7f, 0x9, 0x7, 0x1f, 0x271, 0x8, 0x0, 0x8001, 0x8000, 0x2, 0x8000, 0x8, 0x1, 0x2, 0x3, 0x4, 0x80000001, 0x0, 0x59c8, 0x8000, 0x400, 0x6, 0x7f, 0x5, 0x0, 0x8, 0x8, 0xffff, 0x8000, 0xffffff81, 0x10001, 0x2, 0xffffffc1, 0xac, 0x6, 0xffffffff, 0x1ff, 0xffffffff, 0x1, 0x3ff, 0x8, 0x100, 0x6, 0x7, 0x4, 0x6, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x4, 0x5, 0x9, 0xfffffffd, 0xd697, 0x3, 0x3, 0x800, 0x4, 0x21cd, 0x4, 0x2, 0x100, 0x20, 0x1ff, 0x78000000, 0x0, 0xff, 0x10000, 0x7, 0x80000001, 0x0, 0x0, 0xffff, 0x8001, 0x1, 0x7, 0x80, 0x4, 0x9, 0x139, 0x1, 0x1f, 0x9, 0xfffffff9, 0x3, 0x1, 0x10000, 0x1, 0x0, 0x6, 0x1, 0xdf, 0x6, 0x7, 0x0, 0x6, 0xc0, 0x7, 0x0, 0x4, 0x6, 0x1, 0x12fe437, 0x172b, 0x2, 0x2, 0x3, 0x5, 0x401, 0x100, 0x1d, 0x1ff, 0x8, 0x2, 0x6, 0x7ff, 0xffffdcfa, 0x75, 0xe3a, 0x1, 0xfc, 0x8, 0xffffff81, 0x244d, 0x3, 0x2, 0x400, 0x7, 0x71f8, 0x3, 0x5, 0x1, 0x80000000, 0xe5, 0xfffffff8, 0xdee, 0x3, 0x1, 0x1000, 0x9, 0x4, 0xffff0000, 0x7f, 0x1, 0xfff, 0xb1a, 0x76, 0x9, 0x5802, 0x5c5, 0x20, 0x81, 0xfffffffb, 0x9, 0x7, 0x80, 0xbf, 0x200, 0x81, 0x800, 0x20000000, 0x0, 0x6, 0x1, 0x8, 0x3, 0x1, 0x1, 0x5]}}, @TCA_CGROUP_POLICE={0x10, 0x2, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}}, @TCA_CGROUP_POLICE={0x10, 0x2, @TCA_POLICE_RATE64={0xc, 0x8, 0xf8b}}, @TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x1f, 0x800000, 0x7, 0xffff, 0x401, 0x9048, 0x20, 0x401, 0x8000, 0x8, 0x5, 0xe7eb, 0x8000, 0x8, 0x80000001, 0x8000, 0x7fff, 0xffff, 0x7, 0x2, 0x6, 0x717a, 0x1f, 0x0, 0x2, 0x1, 0x8000, 0xfffffffd, 0x0, 0x80000001, 0x5, 0xdf1a, 0x401, 0x6, 0x6, 0x3, 0x6, 0x1, 0x0, 0x4, 0x1, 0x0, 0x9, 0x8, 0x100, 0x8000, 0x4, 0x88a7, 0xffffff62, 0x9, 0x8000, 0xfff, 0xff, 0x4, 0x217aca3c, 0xd03, 0xd28, 0x3, 0x4, 0x1, 0x3e30, 0x4, 0x44, 0x3, 0x5, 0xf39, 0x6, 0x3ff, 0xffff8000, 0x6, 0x7, 0x800, 0x7f, 0x0, 0x401, 0x4, 0x3, 0x7, 0x1, 0x0, 0x7, 0x5, 0x3, 0x1f, 0x80, 0x0, 0x5c0c, 0x8, 0xc484, 0x0, 0x7f, 0x2, 0x101, 0x8, 0x3ff, 0x3, 0x87, 0x5, 0xffffffe0, 0x0, 0xf4cc, 0x1, 0x83a, 0x200, 0x5, 0x7ff, 0x85, 0x20, 0x81, 0x2, 0x0, 0x83, 0x2, 0xdff2, 0x1616, 0x8, 0x5, 0x7, 0x0, 0xffffd620, 0x5, 0x8, 0x0, 0x10001, 0x8, 0x0, 0x8000, 0x7a, 0x52, 0x177d0000, 0x80, 0x80, 0x4, 0x0, 0x9, 0x9, 0xd3, 0xffff10ca, 0x83, 0x200, 0x5, 0x9cd7, 0xa780, 0xf7, 0x6, 0xffffef3e, 0x0, 0x3, 0x5, 0x1, 0x800, 0x1, 0x9, 0x12000, 0xfff, 0xffffffff, 0x3, 0xd90bcf1b, 0x7, 0x80, 0x7, 0x93d5, 0x4, 0x1f, 0x4, 0xdad, 0x800, 0x0, 0xffffffff, 0x4, 0x8, 0x26ea8040, 0x10000, 0xb7, 0x1, 0x3, 0x6, 0x0, 0x7fff, 0x5, 0x9, 0x2, 0x0, 0x7, 0x200, 0x4, 0x8, 0x6, 0x5, 0x102000, 0x3, 0x6, 0x10000, 0xd6, 0xf3dc, 0xff, 0x2, 0x2, 0x8001, 0x1000, 0x2, 0x8001, 0x8000, 0xa9, 0x7, 0x1ff, 0x1, 0xd93, 0xc8e9, 0xf2356, 0x101, 0x3, 0x9, 0x3, 0xc489, 0x7, 0xcee, 0x2, 0x5, 0x7d5, 0x7f, 0xf821, 0x5, 0x10001, 0x9, 0x12b9, 0x4, 0xfffffffb, 0xfff, 0x8, 0x6cbb, 0x1e, 0x8, 0x6, 0xfffffffd, 0xb536, 0x101, 0xae11, 0xa130, 0x2, 0x1ff, 0xfffffff8, 0x1, 0x3ff, 0x401, 0x800, 0x8, 0x2, 0x3, 0x9, 0x0, 0x9, 0x5, 0x9ed6, 0x9]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x1f, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3f}}, @TCA_CHAIN={0x8, 0xb, 0x6574}]}, 0x56a8}, 0x1, 0x0, 0x0, 0x80c1}, 0x8000) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={r6, 0x9}, &(0x7f0000000300)=0x8) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) 04:55:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000240)="db40951195b65329", 0x8) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="121dc12dba1d7f577fdd9694c0b7cbcc0dd99507bca159544d36d865b0db1fd319d45b85fe72ff54be8a9f0f5dd57fb432206d6c493fcd65188003d94c29f668415700551d580e5c56727a", 0x4b, 0xfffffffffffffffa) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000240)="db40951195b65329", 0x8) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, &(0x7f0000000680)="038a8b9a8ef8fe3f12d4f572599573845b6bdb5fd5d97e0555e85bf097a19634d69a40f3004452098847757261e5152970aba6cc2c3f10296f0600000002623d0c6f7f8a1a0430a5303168bebed69e7bf278b62e75a0dfb36f8ca4ee0218fc898aa111afd212b4a61324ed13df464eb36a8c4b7e6470ad4743fbb44a0568b2c6ecc761af7c4901acce5ebe5808d3dd2845", 0x91, r4) r5 = request_key(&(0x7f0000001280)='syzkaller\x00', &(0x7f00000012c0)={'syz', 0x1}, &(0x7f0000001300)='syz', 0xfffffffffffffffa) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000001340)={'syz'}, &(0x7f00000000c0), 0x0, r5) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r6, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r6}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000000180)={'rmd160-generic\x00'}}) [ 904.960121] net_ratelimit: 12 callbacks suppressed [ 904.960126] protocol 88fb is buggy, dev hsr_slave_0 [ 904.970206] protocol 88fb is buggy, dev hsr_slave_1 04:55:19 executing program 0: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x1b, "4ef93049c752d99ec042b872b03a92273fc205a92f0687671d5c28"}}, 0x21) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000400)={r3, @in={{0x2, 0x4e24, @rand_addr=0x3ff}}}, &(0x7f00000004c0)=0x84) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendto$unix(r5, &(0x7f0000000340)="c563d209e232dcdc92ff7464c42d133f33d7b32c7c50250566251b3f626f148020099f782aac38d066ec3e4f52e2c46dfac4d004213587cf0d46", 0x3a, 0x40818, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e23, 0x80000000, @empty, 0xffffff00}}}, &(0x7f0000000140)=0x84) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000280)=""/146) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) 04:55:20 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r6, @ANYRES64=r7/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776a3eb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd", @ANYRES32=r8, @ANYRES16], 0x8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080d1) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x4e22, 0x3, 0x4e24, 0xffff, 0xa, 0x0, 0x180, 0x73, r5, r10}, {0x100000001, 0xfff, 0x7900000000000000, 0x401, 0x200000000000, 0x1, 0x786a, 0x1f}, {0x59, 0xfffffffffffffffd, 0xfff, 0x800}, 0x2, 0x6e6bb1, 0x1, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d2, 0x33}, 0x2, @in6=@local, 0x0, 0x1, 0x3, 0x81, 0x6, 0x48, 0x5}}, 0xe8) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="42c602b453311859422c07d18ef92c3084d19bc5660c1cb5292779d3f5d5485214ecce079a63f9e509da2a23b2a39e79a237cfab6ae66352121aa83aa15266639035e0a193aa7225335e8171d81883284fedce61dd977707bd65a0f752588151e050ba049c4eeece516a5e9b593844420530cfa3c7b0dfdb35362db1f63eb579912a03b88000deb62b2d88283939e50536253297e5bcaa2d8d891092fc230fb4844d9d2008374becf6a64e3764e5a5d2a046b830312374bad624", 0xba, 0xa0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000000, 0x4011, 0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) [ 905.520107] protocol 88fb is buggy, dev hsr_slave_0 [ 905.525262] protocol 88fb is buggy, dev hsr_slave_1 04:55:20 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x10000) readahead(r5, 0x7fffffff, 0x400) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 906.081487] protocol 88fb is buggy, dev hsr_slave_0 [ 906.086647] protocol 88fb is buggy, dev hsr_slave_1 [ 906.091819] protocol 88fb is buggy, dev hsr_slave_0 [ 906.096886] protocol 88fb is buggy, dev hsr_slave_1 04:55:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @multicast1}}, [0xfff, 0x7ff, 0x2, 0xe4c, 0x7fffffff, 0x4, 0x8, 0x6, 0xfffffffffffffffd, 0x3, 0x1000, 0xfffffffffffffffe, 0x2, 0x9, 0x1]}, &(0x7f0000000380)=0x100) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) read$eventfd(r3, &(0x7f0000000240), 0x8) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@mcast1, 0x4e20, 0x20, 0x4e23, 0x200, 0x2, 0x120, 0x20, 0x9f, 0x0, r5}, {0xc0f1, 0x1, 0x100, 0xce2, 0x8, 0x1ff, 0xff, 0x1ff}, {0xffffffffffffffff, 0x20, 0x7f, 0x8}, 0x22, 0x6e6bb2, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x0, 0x4, 0x878e9e1eb2ec3795, 0x40, 0x0, 0x3f, 0x3}}, 0xe8) 04:55:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92r3}) ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f00000000c0)={0x18}) 04:55:21 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/246, 0xf6) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)=0x9) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={r3, 0x40000, r1}) perf_event_open(&(0x7f0000000280)={0x5, 0xfffffffffffffd73, 0x81, 0x7f, 0x1, 0xff, 0x0, 0x4, 0x40228, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440), 0x8}, 0x2440, 0x100000000, 0x7, 0x0, 0x3, 0x10000, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x5) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) wait4(r4, &(0x7f0000000140), 0x80000004, &(0x7f0000000180)) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x8}) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000640)={0x1, 0x2, 0x1000, 0xe2, &(0x7f0000000480)="84e1b2425b925cdd65fe2669408a6bac6f56ad2bb4cc1f6b8f8e18b783609c139b6b9e688d6f1f7c6cb1d8d05215b012b73ba3ca9a3fa1d85b91642d01d22bf5af131428b8d1bbac25ca66f41c48549be08f8ab06f15bc2a9239e7d94e3dadbc40a3a94a1ba6864fce3aa1527c55e34b958173fdba2c41f5830b9a54e930b4bdd5b11e14ab6e7c55e0d68fbf6a8bff0135c13f44138378f24f1624237d2e4893d5a2cfe003b3c32ee8404887ca986f2e7b2f2897080308464b3defe2c8840d2ab6487309565cecef09ca999007201246a1e960f242e2729ca4aafceff66718c49af5", 0xc0, 0x0, &(0x7f0000000580)="a1f8b01e2c4009469d3c5580a1921ed668af9a1e07f43a16363f4287a138ad369801027b944e8cfb6dec3103bc3e2480acc8b98d957d11563813bdace520a55fd3cba0a50f02ccff87390613c3098d02bc8548d75ddea0b6c798d7230a0eed4e4b815d78d47630188ed667364d4b4eab226baeb916b176e56752e336f16420fff2b747bb9e2fea24c0e6154afa863e6dac86bff6fcfd099d97673aad7154060e752322cbbf6e5d4f64019621fcc269a26e14eb31e314c23595fdbc4011f537cf"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r6, 0x80000}) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x300, 0x0) ioctl$SIOCRSACCEPT(r8, 0x89e3) r9 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x7fff, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f00000003c0)={0x6, 0x3f, 0x1000, 0x9, 0x10001, 0x20}) 04:55:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb1d252d6651b204c}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)=@delchain={0x46c, 0x65, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x1001f}, {0xffff, 0xf}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x30, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x7, 0x63}}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xec}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x2a4, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_ACT={0x128, 0x4, @m_bpf={0x124, 0x1e, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xd0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x6, 0x8, 0x4, 0x22e5}}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x0, 0x5, 0x6, 0x80}, {0x2, 0x40, 0x7f}, {0xff, 0x3, 0x5, 0x1}, {0xffc0, 0x8, 0x3f, 0x8000}, {0x0, 0xd2, 0x20, 0x4}, {0x4, 0x8, 0x1f, 0x7}, {0x6, 0x7, 0x73, 0x1}, {0x2, 0x8, 0x3, 0xfff}, {0xd95a, 0x2, 0x1, 0x7fff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x6, 0x1, 0x1f, 0xbeba}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x1, 0x3, 0x80000000, 0x4}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1000, 0x5, 0x0, 0xff}, {0x2, 0x6, 0x1f, 0x2}, {0x5, 0xd0, 0x6, 0xfff}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x7, 0x1c, 0x40, 0x2}, {0x100, 0x90, 0x5, 0x3}, {0x61, 0x0, 0x0, 0x1ff}]}]}, {0x46, 0x6, "fa62e9fa354a41bf6fa3dab58004e3f08b42106d341994f46138bd74c20ff15df5529e6d0b7d09f7641781a162677a3ff80066a25a2446c478f673a85694d04d4d60"}}}}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_ACT={0x74, 0x4, @m_tunnel_key={0x70, 0x1e, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x5, 0x5, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x100, 0x1, 0x8, 0x3, 0x43f}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, [], 0x29}}]}, {0xc, 0x6, "f8198514af8549f7"}}}}, @TCA_FW_POLICE={0xc, 0x2, @TCA_POLICE_AVRATE={0x8}}, @TCA_FW_MASK={0x8, 0x5, 0xffff}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xfffffffffffffff3, 0x5, 0x80000001, 0x80, {0x5, 0x0, 0xfe, 0x4e, 0x3, 0x7}, {0x5f, 0x0, 0x42, 0x0, 0x8000, 0x1}, 0x0, 0x48000000, 0x7d}}}, @TCA_FW_ACT={0x6c, 0x4, @m_mpls={0x68, 0x20, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xf05c9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x90c8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6003}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x13}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfdb9a}]}, {0xb, 0x6, "2bc92ad165a20a"}}}}]}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x158, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @empty}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_ACT={0x10c, 0x3, @m_skbedit={0x108, 0xd, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xffffffc1, 0x10000000, 0x1, 0x3ba}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0xaa, 0x6, "2a7d39baa742f06437e85139fe62a91f9056d27fe46d61aab509941ee5756013fd66523b7353927d7562ac1069cf60c8f449a8b0b798cb3e177247bb648ca11bf6b546ec540d28ed8e89e42d23452b29eaa24d44c15fe82d4e2e46d484ff9274db0582abceee7af783b3bc0980af75f8c9647f4bb136cc70437e3c4596caf84b12c2daa66d76131b89d542a4ab78b514caade6f29f1696b34681f0264395fe147ab293158a16"}}}}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x7}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:55:21 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x920xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x80000001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:22 executing program 0: 04:55:22 executing program 1: 04:55:22 executing program 0: 04:55:22 executing program 1: 04:55:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 04:55:22 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe(&(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, 0x0) 04:55:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4100, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x7) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8000, 0x600882) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000003}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) 04:55:22 executing program 0: r0 = socket(0xa, 0x3, 0xfe) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) 04:55:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() process_vm_writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000200)=""/246, 0xf6}], 0x2, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/216, 0xd8}], 0x4, 0x0) 04:55:22 executing program 4: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 04:55:22 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() getgid() socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0) tkill(r2, 0x9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) [ 908.047330] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 908.083046] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 908.102031] CPU: 1 PID: 14896 Comm: syz-executor.1 Not tainted 4.14.163-syzkaller #0 [ 908.109962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.119322] Call Trace: [ 908.121928] dump_stack+0x142/0x197 [ 908.125577] warn_alloc.cold+0x96/0x1af [ 908.129570] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 908.134432] ? wait_for_completion+0x420/0x420 [ 908.139033] __alloc_pages_slowpath+0x23c6/0x2930 [ 908.143904] ? warn_alloc+0xf0/0xf0 [ 908.147546] ? __might_sleep+0x93/0xb0 [ 908.151444] __alloc_pages_nodemask+0x62c/0x7a0 [ 908.156122] ? rcu_read_lock_sched_held+0x110/0x130 [ 908.161149] ? __alloc_pages_slowpath+0x2930/0x2930 [ 908.166185] alloc_pages_current+0xec/0x1e0 [ 908.170518] kvm_mmu_create+0xdf/0x1e0 [ 908.174420] kvm_arch_vcpu_init+0x29c/0x8e0 [ 908.178754] kvm_vcpu_init+0x272/0x360 [ 908.182655] vmx_create_vcpu+0xfc/0x2aa0 [ 908.186725] ? mutex_trylock+0x1c0/0x1c0 [ 908.190802] ? handle_rdmsr+0x6e0/0x6e0 [ 908.194796] ? wait_for_completion+0x420/0x420 [ 908.199401] kvm_arch_vcpu_create+0x8c/0xc0 [ 908.203732] kvm_vm_ioctl+0x501/0x1600 [ 908.207626] ? __lock_acquire+0x5f7/0x4620 [ 908.211873] ? kvm_vcpu_release+0xa0/0xa0 [ 908.216030] ? trace_hardirqs_on+0x10/0x10 [ 908.220280] ? trace_hardirqs_on+0x10/0x10 [ 908.224521] ? __might_fault+0x110/0x1d0 [ 908.228587] ? save_trace+0x290/0x290 [ 908.232394] ? __might_fault+0x110/0x1d0 [ 908.236459] ? __fget+0x210/0x370 [ 908.239947] ? find_held_lock+0x35/0x130 [ 908.244015] ? __fget+0x210/0x370 [ 908.247476] ? kvm_vcpu_release+0xa0/0xa0 [ 908.251631] do_vfs_ioctl+0x7ae/0x1060 [ 908.255533] ? selinux_file_mprotect+0x5d0/0x5d0 [ 908.260295] ? lock_downgrade+0x740/0x740 [ 908.264454] ? ioctl_preallocate+0x1c0/0x1c0 [ 908.268874] ? __fget+0x237/0x370 [ 908.272342] ? security_file_ioctl+0x89/0xb0 [ 908.276763] SyS_ioctl+0x8f/0xc0 [ 908.280132] ? do_vfs_ioctl+0x1060/0x1060 [ 908.284295] do_syscall_64+0x1e8/0x640 [ 908.288186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 908.293045] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 908.298235] RIP: 0033:0x45af49 [ 908.301423] RSP: 002b:00007fda2b816c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.309157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 908.316434] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 908.323707] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 908.330982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda2b8176d4 [ 908.338255] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff 04:55:23 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x3ff, 0x3, 0x2}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x7, 0x1, 0x1, 0x4, 0xfffffe01, 0x5c, 0x1, r2}, 0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r6, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r4, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r10, @ANYRES64=r11/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd000000000000000000"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0xd7a, 0x77, 0x1, 0x40, r6, 0x1f5d, [], r9, 0xffffffffffffffff, 0x3, 0x5}, 0x3c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000880)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000001804000000000000200200000000000030030000300300003003000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000ffe9000000000000000000000000ebff000000000000000000000000000000000000000000000000008000"/64], @ANYBLOB="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"], 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x22, @multicast1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r3, 0x0, r7, 0x0, 0x30005, 0x0) 04:55:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000200630100000000000095800000a469b4ed"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 908.408688] warn_alloc_show_mem: 1 callbacks suppressed [ 908.415520] Mem-Info: [ 908.417952] active_anon:859777 inactive_anon:1746 isolated_anon:0 [ 908.417952] active_file:4478 inactive_file:5739 isolated_file:0 [ 908.417952] unevictable:0 dirty:182 writeback:0 unstable:0 [ 908.417952] slab_reclaimable:15691 slab_unreclaimable:127270 [ 908.417952] mapped:60165 shmem:1791 pagetables:27918 bounce:0 [ 908.417952] free:476114 free_pcp:277 free_cma:0 [ 908.488843] Node 0 active_anon:1882108kB inactive_anon:6900kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:55:23 executing program 4: [ 908.609937] Node 1 active_anon:1556900kB inactive_anon:84kB active_file:17848kB inactive_file:22956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25652kB dirty:724kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:55:23 executing program 4: [ 908.678947] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:55:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f0000b86000)={0x0, 0x0}, 0x10) [ 908.764314] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 908.782091] Node 0 DMA32 free:36324kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:256kB local_pcp:236kB free_cma:0kB 04:55:23 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe(&(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 908.843199] lowmem_reserve[]: 0 0 0 0 0 [ 908.848696] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 908.905230] lowmem_reserve[]: 0 0 0 0 0 [ 908.912241] Node 1 Normal free:1857604kB min:53508kB low:66884kB high:80260kB active_anon:1557100kB inactive_anon:84kB active_file:17848kB inactive_file:22956kB unevictable:0kB writepending:724kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20448kB pagetables:47192kB bounce:0kB free_pcp:1076kB local_pcp:440kB free_cma:0kB [ 908.949574] lowmem_reserve[]: 0 0 0 0 0 [ 908.953757] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 19*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10480kB [ 908.973708] Node 0 DMA32: 41*4kB (UMEH) 677*8kB (UMEH) 890*16kB (UMEH) 516*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36396kB [ 908.988314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 909.003026] Node 1 Normal: 51*4kB (UE) 62*8kB (UME) 34*16kB (UE) 58*32kB (UME) 42*64kB (UM) 1*128kB (M) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 3*2048kB (UME) 450*4096kB (M) = 1857052kB [ 909.019902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.034985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.054859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.105185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.107574] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 909.131771] 12015 total pagecache pages [ 909.170559] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 909.187367] 0 pages in swap cache [ 909.194524] CPU: 0 PID: 14940 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0 [ 909.199650] Swap cache stats: add 0, delete 0, find 0/0 [ 909.202430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.202434] Call Trace: [ 909.202450] dump_stack+0x142/0x197 [ 909.202465] warn_alloc.cold+0x96/0x1af [ 909.202475] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 909.202495] ? wait_for_completion+0x420/0x420 [ 909.202509] __alloc_pages_slowpath+0x23c6/0x2930 [ 909.202532] ? warn_alloc+0xf0/0xf0 [ 909.202552] ? __might_sleep+0x93/0xb0 [ 909.202565] __alloc_pages_nodemask+0x62c/0x7a0 [ 909.202578] ? rcu_read_lock_sched_held+0x110/0x130 [ 909.202589] ? __alloc_pages_slowpath+0x2930/0x2930 [ 909.202613] alloc_pages_current+0xec/0x1e0 [ 909.225349] Free swap = 0kB [ 909.227479] kvm_mmu_create+0xdf/0x1e0 [ 909.227495] kvm_arch_vcpu_init+0x29c/0x8e0 [ 909.227507] kvm_vcpu_init+0x272/0x360 [ 909.227521] vmx_create_vcpu+0xfc/0x2aa0 [ 909.287359] ? mutex_trylock+0x1c0/0x1c0 [ 909.291413] ? handle_rdmsr+0x6e0/0x6e0 [ 909.295384] ? wait_for_completion+0x420/0x420 [ 909.299952] kvm_arch_vcpu_create+0x8c/0xc0 [ 909.304269] kvm_vm_ioctl+0x501/0x1600 [ 909.308149] ? __lock_acquire+0x5f7/0x4620 [ 909.312369] ? kvm_vcpu_release+0xa0/0xa0 [ 909.316497] ? trace_hardirqs_on+0x10/0x10 [ 909.320719] ? trace_hardirqs_on+0x10/0x10 [ 909.324937] ? __might_fault+0x110/0x1d0 [ 909.328982] ? save_trace+0x290/0x290 [ 909.332910] ? __might_fault+0x110/0x1d0 [ 909.336986] ? __fget+0x210/0x370 [ 909.340435] ? find_held_lock+0x35/0x130 [ 909.344484] ? __fget+0x210/0x370 [ 909.347923] ? kvm_vcpu_release+0xa0/0xa0 [ 909.352068] do_vfs_ioctl+0x7ae/0x1060 [ 909.355947] ? selinux_file_mprotect+0x5d0/0x5d0 [ 909.360683] ? lock_downgrade+0x740/0x740 [ 909.364817] ? ioctl_preallocate+0x1c0/0x1c0 [ 909.369220] ? __fget+0x237/0x370 [ 909.372660] ? security_file_ioctl+0x89/0xb0 [ 909.377058] SyS_ioctl+0x8f/0xc0 [ 909.380413] ? do_vfs_ioctl+0x1060/0x1060 [ 909.384551] do_syscall_64+0x1e8/0x640 [ 909.388432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 909.393264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 909.398438] RIP: 0033:0x45af49 [ 909.401611] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.409302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 909.416554] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 909.423813] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 909.431064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4 [ 909.438315] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 909.449715] Total swap = 0kB [ 909.464312] 1965979 pages RAM [ 909.474827] 0 pages HighMem/MovableOnly [ 909.490961] 335871 pages reserved [ 909.523158] 0 pages cma reserved [ 909.542058] Mem-Info: [ 909.545000] active_anon:859780 inactive_anon:1746 isolated_anon:0 [ 909.545000] active_file:4472 inactive_file:5746 isolated_file:6 [ 909.545000] unevictable:0 dirty:18 writeback:20 unstable:0 [ 909.545000] slab_reclaimable:15726 slab_unreclaimable:127405 [ 909.545000] mapped:60165 shmem:1791 pagetables:27908 bounce:0 [ 909.545000] free:475988 free_pcp:399 free_cma:0 [ 909.632714] Node 0 active_anon:1882108kB inactive_anon:6900kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:55:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) mlockall(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900ffff0016000000a6ec7e053c87475c0000000c7d88000000140c44124bd8f878e638f8cb7002bee923aee78e58ddc76efbc7ae2d90bf0ea86e72d74898118fc7afce53bdd1dceaba2d46f741ca9b17c465d35b73179c138a340e8eef128d47d309620ab2ac897a9a52310f7c12a900670baee261c3a942e0efa85ebf56a1b07a6a9536defb634e8f92d6a0c730f248ea53fb"], 0x14}}, 0x0) socket$alg(0x26, 0x5, 0x0) 04:55:24 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() getgid() socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0) tkill(r2, 0x9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) [ 909.661269] Node 1 active_anon:1556888kB inactive_anon:80kB active_file:17848kB inactive_file:23004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25584kB dirty:68kB writeback:68kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 909.690412] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.717017] lowmem_reserve[]: 0 2569 2569 2569 2569 04:55:24 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x43445b68da41ef8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f0000000200)={0x18, 0x0, 0x0, 0xee}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 909.722137] Node 0 DMA32 free:36420kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:396kB local_pcp:152kB free_cma:0kB [ 909.755039] lowmem_reserve[]: 0 0 0 0 0 [ 909.759070] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.853224] lowmem_reserve[]: 0 0 0 0 0 [ 909.864380] Node 1 Normal free:1855944kB min:53508kB low:66884kB high:80260kB active_anon:1557188kB inactive_anon:80kB active_file:16948kB inactive_file:23204kB unevictable:1000kB writepending:248kB present:3932160kB managed:3870192kB mlocked:1000kB kernel_stack:20480kB pagetables:47136kB bounce:0kB free_pcp:740kB local_pcp:448kB free_cma:0kB 04:55:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x100000001}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x200, r2}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid'}}, {@debug={'debug', 0x3d, 0x9}}, {@access_any='access=any'}, {@mmap='mmap'}, {@msize={'msize', 0x3d, 0x52}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}]}}) 04:55:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x200300, 0x0) write$P9_ROPEN(r1, &(0x7f0000000080)={0x1a9, 0x71, 0x1, {{0x71cd7af1695c7b8f, 0x3, 0x4}, 0x7}}, 0xe75c) [ 910.018720] lowmem_reserve[]: 0 0 0 0 0 [ 910.032098] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 19*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10480kB [ 910.095002] Node 0 DMA32: 32*4kB (UMEH) 675*8kB (UMH) 887*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36104kB [ 910.141818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 910.186471] Node 1 Normal: 91*4kB (UE) 176*8kB (UE) 73*16kB (UM) 67*32kB (UE) 43*64kB (UME) 2*128kB (UM) 0*256kB 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 445*4096kB (M) = 1835420kB 04:55:24 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000002580)={0x401, 0x2}, 0xc) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x200, 0x9, &(0x7f0000002400)=[{&(0x7f00000000c0)="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", 0x1000, 0x80000001}, {&(0x7f00000010c0)="fcd4ecaab5e9a3191f02903d4eaeb7d599b2", 0x12, 0xfbd}, {&(0x7f0000001100)="9e168197e1ae91575bec086d13e80b09e4e916795e82e928687ffbf228491d1676f483a12dec37c503c413c4a34095e7d1d8d35fd5e91d53470aac131638933381debbdb685d73607445c6affa2d0264646f90f2ee39e48a55192b887d1500ee6207b3c3790737734c05119e7a436afcab619cd4bc866ed9d813a1a7a8c66d9889d865083d460b3616af83113d097cdc83bf5bc9ca3d7e29b204242b9d2125d22bba95b1fb6d70033a92a9bb3201fada2bf9d01efc1f5d2f9f4152", 0xbb, 0x7f}, {&(0x7f00000011c0)="84ffd12bec", 0x5, 0x4}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="19953ad11c38948abbf01ca4a454a9a39be7f33a800edbea81d5e3d1d2aaec302f8f27efc8a004251e1de6b429db7361f46561e6213f2884c242688b6a6c8c0ffebe5cc83374c89704b6e412dbd9", 0x4e, 0x1}, {&(0x7f0000002280)="5e447492b83ac650c9954ed70253b94e64cfe098bd3b4495cb81300f8c372d6316e3b51a842996aba9e05f0ae814204a5f98d90a584ae7d42972", 0x3a, 0x2}, {&(0x7f00000022c0)="8b49c4dd95e2b9d1c1b55e5f6be80871c0f3105e7e85e3f3aa90ca486636fb569ea96f9abf18476ffd310b2de3f70dad4fb48fd1fa7ac1b268ef20bce259e28de72f35295229584fec3b146b05030f5e0d830fc5d34387986692486b109e935f2ad60b31ad0a99e551a622860487dc2d2de8fb2de83c79ddd5f6aa146896fc8f3fb0e1a2d93ccf0e", 0x88, 0x3579}, {&(0x7f0000002380)="6717979b81216f9f885ec1e249ecddb7c8664e8c31e2404c0a3c4c98fe643432906569ea380c2ec07cbe3c8e5426a36459914f06109b6dd4f205748a7e09fc3aa515680be24f60922268eefaf85dcf9355c690eef382666ef284ae913fa75a1b624f93c66026b6bf4f89f14e762814f0aebca8ead823bede45d1bb52beaef746", 0x80, 0x6}], 0x402, &(0x7f0000002500)={[{@ikeep='ikeep'}, {@inode64='inode64'}, {@noquota='noquota'}, {@usrquota='usrquota'}], [{@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat', 0x3d, '/dev/dri/card#\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/dri/card#\x00'}}, {@measure='measure'}]}) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000025c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x1, 'syz0\x00', @default, 0x0, 0x2, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) [ 910.266295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 910.292704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 910.314933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 910.333594] XFS (loop3): unknown mount option [appraise_type=imasig]. [ 910.338807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 910.364604] 15886 total pagecache pages [ 910.377139] 0 pages in swap cache [ 910.385262] Swap cache stats: add 0, delete 0, find 0/0 [ 910.398310] XFS (loop3): unknown mount option [appraise_type=imasig]. [ 910.401915] Free swap = 0kB [ 910.410113] net_ratelimit: 12 callbacks suppressed [ 910.410119] protocol 88fb is buggy, dev hsr_slave_0 [ 910.420198] protocol 88fb is buggy, dev hsr_slave_1 [ 910.425322] protocol 88fb is buggy, dev hsr_slave_0 [ 910.430414] protocol 88fb is buggy, dev hsr_slave_1 [ 910.439983] Total swap = 0kB [ 910.443855] 1965979 pages RAM [ 910.453940] 0 pages HighMem/MovableOnly [ 910.462536] 335871 pages reserved 04:55:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2}) [ 910.486065] 0 pages cma reserved 04:55:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b70200000b400000bfa300000000000007020000fffeffff7a03f0fff8ffffff79a4f0ff00000000b7060000ffffdfff2d640500000000007502faff070000000404000001007d60b703000000100c006a0a00fe000000008500000026000000b70000000000004295000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c1dc908abb6e7325ec1956bd8660bf36628dff1a15750ab9a780001000000000000d687dd5c124de1c623ecead3b959ccd4bf20c2bd2d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8eb040c50287d17a7f4182f32333b08c6e497687e10a4daea5cac0ceafda9a2eeb02a1f5104d16ddb64963d84d91757f36accc4f36f20812a60c6e6f814cd5817e0b8f6f5e6ee7a39e180b5a18d7fa165e3ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb30a5bb8c13d5b47975b4b13b9f35e4f41a62df9b4c03048656e99ce53466f03b454e5c605560ffcc0000c6b76c12aadd308fc0b0212c8d944f22d8c19f95738b34de0000000048ce18799ee53da177a81ea65e65021d71b7ec86a75bb32935f542127a8f8438feecbb1c757f7169f006f3f5c95177fbd0b14b3625962905ef911785c8cc0c4a11cb136d8a6084d676d8ef8aa6ecc2d32e3f4ee367e0a769c0a606636c9f4a4413c098f4fcc9e8b34dcc73b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8f32b70a80cce69df30d3d67d84ccf3f9db9b690111ff01000000000000f1008790e6b743106ad4448b1228dfcecf59cabd6035b2201803785a519b2467632d0db913c15f5754f02f1a94196574d5b73d1fc0f7133ef63a98d15a5df50414c700"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) mlockall(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900ffff0016000000a6ec7e053c87475c0000000c7d88000000140c44124bd8f878e638f8cb7002bee923aee78e58ddc76efbc7ae2d90bf0ea86e72d74898118fc7afce53bdd1dceaba2d46f741ca9b17c465d35b73179c138a340e8eef128d47d309620ab2ac897a9a52310f7c12a900670baee261c3a942e0efa85ebf56a1b0"], 0x1}}, 0x0) socket$alg(0x26, 0x5, 0x0) 04:55:25 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2) 04:55:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = creat(0x0, 0x162) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 04:55:25 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="59dd9162", @ANYRES16=0x0, @ANYBLOB="3e012bbd7000fddbdf251500000008000300", @ANYRES32=r5, @ANYBLOB="0a001a00ffffffffffff00000800010002000000"], 0x30}}, 0x80) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x9) splice(r6, &(0x7f0000000140)=0x8000, r7, &(0x7f0000000340), 0x3, 0x5) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:25 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@random="47fc4d3fbc4a", @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "e2c38b", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 04:55:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 04:55:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x417) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) sendto$inet(r0, &(0x7f0000000200)="0c268a927f1f6588b967481241ba7860005c", 0xffffffffffffff11, 0x11, 0x0, 0xda) 04:55:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffc, 0xa6e8445838d564cb) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) [ 910.886318] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 910.933177] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 910.965775] CPU: 1 PID: 15000 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 910.973742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.983106] Call Trace: [ 910.985706] dump_stack+0x142/0x197 [ 910.989348] warn_alloc.cold+0x96/0x1af [ 910.993331] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 910.998190] ? wait_for_completion+0x420/0x420 [ 911.002787] __alloc_pages_slowpath+0x23c6/0x2930 [ 911.007651] ? warn_alloc+0xf0/0xf0 [ 911.011296] ? __might_sleep+0x93/0xb0 [ 911.015241] __alloc_pages_nodemask+0x62c/0x7a0 [ 911.019924] ? rcu_read_lock_sched_held+0x110/0x130 [ 911.024954] ? __alloc_pages_slowpath+0x2930/0x2930 [ 911.030001] alloc_pages_current+0xec/0x1e0 [ 911.034333] kvm_mmu_create+0xdf/0x1e0 [ 911.038243] kvm_arch_vcpu_init+0x29c/0x8e0 [ 911.042578] kvm_vcpu_init+0x272/0x360 [ 911.046475] vmx_create_vcpu+0xfc/0x2aa0 [ 911.050538] ? mutex_trylock+0x1c0/0x1c0 [ 911.054621] ? handle_rdmsr+0x6e0/0x6e0 [ 911.058608] ? wait_for_completion+0x420/0x420 [ 911.063199] kvm_arch_vcpu_create+0x8c/0xc0 [ 911.067529] kvm_vm_ioctl+0x501/0x1600 [ 911.071428] ? __lock_acquire+0x5f7/0x4620 [ 911.075679] ? kvm_vcpu_release+0xa0/0xa0 [ 911.079833] ? retint_kernel+0x2d/0x2d [ 911.083728] ? trace_hardirqs_on_caller+0x400/0x590 [ 911.088753] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 911.093518] ? check_preemption_disabled+0x3c/0x250 [ 911.098539] ? retint_kernel+0x2d/0x2d [ 911.102443] ? selinux_file_ioctl+0x2b8/0x560 [ 911.106956] ? kvm_vcpu_release+0xa0/0xa0 [ 911.111111] do_vfs_ioctl+0x7ae/0x1060 [ 911.115006] ? selinux_file_mprotect+0x5d0/0x5d0 [ 911.119770] ? lock_downgrade+0x740/0x740 [ 911.123933] ? ioctl_preallocate+0x1c0/0x1c0 [ 911.128352] ? __fget+0x237/0x370 [ 911.131829] ? security_file_ioctl+0x89/0xb0 [ 911.136248] SyS_ioctl+0x8f/0xc0 [ 911.139626] ? do_vfs_ioctl+0x1060/0x1060 [ 911.143785] do_syscall_64+0x1e8/0x640 [ 911.147681] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 911.152532] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 911.157723] RIP: 0033:0x45af49 [ 911.160919] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.168634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 911.175916] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 04:55:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x2}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) [ 911.183204] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 911.183210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 911.183216] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 911.210098] protocol 88fb is buggy, dev hsr_slave_0 [ 911.215222] protocol 88fb is buggy, dev hsr_slave_1 [ 911.430283] Mem-Info: [ 911.450186] active_anon:859895 inactive_anon:1747 isolated_anon:0 [ 911.450186] active_file:4202 inactive_file:5706 isolated_file:0 [ 911.450186] unevictable:9533 dirty:26 writeback:0 unstable:0 [ 911.450186] slab_reclaimable:15792 slab_unreclaimable:127096 [ 911.450186] mapped:64752 shmem:1791 pagetables:28035 bounce:0 [ 911.450186] free:466067 free_pcp:310 free_cma:0 04:55:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 911.508136] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:20kB inactive_file:0kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 911.540271] protocol 88fb is buggy, dev hsr_slave_0 [ 911.545351] protocol 88fb is buggy, dev hsr_slave_1 [ 911.575252] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 911.588823] Node 1 active_anon:1557272kB inactive_anon:84kB active_file:16788kB inactive_file:22824kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:43916kB dirty:100kB writeback:100kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 911.617765] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 911.626558] CPU: 0 PID: 15009 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 911.634475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.643862] Call Trace: [ 911.646456] dump_stack+0x142/0x197 [ 911.650074] warn_alloc.cold+0x96/0x1af [ 911.654042] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 911.658877] ? wait_for_completion+0x420/0x420 [ 911.663454] __alloc_pages_slowpath+0x23c6/0x2930 [ 911.668289] ? warn_alloc+0xf0/0xf0 [ 911.671915] ? __might_sleep+0x93/0xb0 [ 911.675823] __alloc_pages_nodemask+0x62c/0x7a0 [ 911.680482] ? rcu_read_lock_sched_held+0x110/0x130 [ 911.685480] ? __alloc_pages_slowpath+0x2930/0x2930 [ 911.690485] alloc_pages_current+0xec/0x1e0 [ 911.694805] kvm_mmu_create+0xdf/0x1e0 [ 911.699110] kvm_arch_vcpu_init+0x29c/0x8e0 [ 911.703424] kvm_vcpu_init+0x272/0x360 [ 911.707297] vmx_create_vcpu+0xfc/0x2aa0 [ 911.711343] ? mutex_trylock+0x1c0/0x1c0 [ 911.715406] ? handle_rdmsr+0x6e0/0x6e0 [ 911.719363] ? wait_for_completion+0x420/0x420 [ 911.723932] kvm_arch_vcpu_create+0x8c/0xc0 [ 911.728246] kvm_vm_ioctl+0x501/0x1600 [ 911.732120] ? __lock_acquire+0x5f7/0x4620 [ 911.736357] ? kvm_vcpu_release+0xa0/0xa0 [ 911.740489] ? trace_hardirqs_on+0x10/0x10 [ 911.744713] ? trace_hardirqs_on+0x10/0x10 [ 911.748929] ? __might_fault+0x110/0x1d0 [ 911.752973] ? save_trace+0x290/0x290 [ 911.756753] ? __might_fault+0x110/0x1d0 [ 911.760816] ? __fget+0x210/0x370 [ 911.764267] ? find_held_lock+0x35/0x130 [ 911.768328] ? __fget+0x210/0x370 [ 911.771775] ? kvm_vcpu_release+0xa0/0xa0 [ 911.775924] do_vfs_ioctl+0x7ae/0x1060 [ 911.779816] ? selinux_file_mprotect+0x5d0/0x5d0 [ 911.784990] ? lock_downgrade+0x740/0x740 [ 911.789121] ? ioctl_preallocate+0x1c0/0x1c0 [ 911.793518] ? __fget+0x237/0x370 [ 911.796961] ? security_file_ioctl+0x89/0xb0 [ 911.801352] SyS_ioctl+0x8f/0xc0 [ 911.804706] ? do_vfs_ioctl+0x1060/0x1060 [ 911.808841] do_syscall_64+0x1e8/0x640 [ 911.812723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 911.817564] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 911.822740] RIP: 0033:0x45af49 [ 911.825910] RSP: 002b:00007fe80f23dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.833606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 911.840862] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 911.848116] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 911.855384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f23e6d4 [ 911.862651] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 911.875496] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.902356] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 911.907426] Node 0 DMA32 free:36104kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:20kB inactive_file:0kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:380kB local_pcp:172kB free_cma:0kB [ 911.937628] lowmem_reserve[]: 0 0 0 0 0 [ 911.941935] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:55:26 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:55:26 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000100)=r6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x544a, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000000c0)=0x101, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r7 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002010}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xd4, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x810}, 0x640ac001) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 911.995165] lowmem_reserve[]: 0 0 0 0 0 [ 911.999214] Node 1 Normal free:1820856kB min:53508kB low:66884kB high:80260kB active_anon:1557272kB inactive_anon:84kB active_file:16788kB inactive_file:22824kB unevictable:38108kB writepending:248kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20416kB pagetables:47364kB bounce:0kB free_pcp:1104kB local_pcp:452kB free_cma:0kB [ 912.199316] lowmem_reserve[]: 0 0 0 0 0 [ 912.223037] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 20*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10496kB [ 912.313305] Node 0 DMA32: 32*4kB (UMEH) 681*8kB (UMH) 887*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36152kB [ 912.355474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 912.387560] Node 1 Normal: 4*4kB (UME) 189*8kB (U) 108*16kB (UE) 85*32kB (UM) 44*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (M) 1*2048kB (E) 440*4096kB (M) = 1815896kB [ 912.411889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.433503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 912.448929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 04:55:27 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 912.473213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 912.486592] 16597 total pagecache pages [ 912.490191] protocol 88fb is buggy, dev hsr_slave_0 [ 912.496969] protocol 88fb is buggy, dev hsr_slave_1 [ 912.509057] Mem-Info: [ 912.515402] 0 pages in swap cache [ 912.519496] Swap cache stats: add 0, delete 0, find 0/0 [ 912.537708] active_anon:862026 inactive_anon:1745 isolated_anon:0 [ 912.537708] active_file:4199 inactive_file:5720 isolated_file:0 [ 912.537708] unevictable:9533 dirty:55 writeback:40 unstable:0 [ 912.537708] slab_reclaimable:15804 slab_unreclaimable:126751 [ 912.537708] mapped:64772 shmem:1791 pagetables:27990 bounce:0 [ 912.537708] free:464856 free_pcp:291 free_cma:0 [ 912.582057] Free swap = 0kB [ 912.592753] Total swap = 0kB [ 912.599730] 1965979 pages RAM [ 912.603326] 0 pages HighMem/MovableOnly [ 912.607530] 335871 pages reserved [ 912.611598] 0 pages cma reserved [ 912.623581] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:8kB inactive_file:12kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 912.689574] Node 1 active_anon:1570296kB inactive_anon:76kB active_file:16788kB inactive_file:22868kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:43996kB dirty:216kB writeback:160kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 912.803523] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.867803] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 912.879004] Node 0 DMA32 free:35784kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:8kB inactive_file:12kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:332kB local_pcp:208kB free_cma:0kB [ 912.969602] lowmem_reserve[]: 0 0 0 0 0 [ 912.981723] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.082856] lowmem_reserve[]: 0 0 0 0 0 [ 913.109489] Node 1 Normal free:1823384kB min:53508kB low:66884kB high:80260kB active_anon:1557044kB inactive_anon:76kB active_file:16788kB inactive_file:22876kB unevictable:38108kB writepending:316kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20288kB pagetables:47108kB bounce:0kB free_pcp:944kB local_pcp:568kB free_cma:0kB [ 913.203441] lowmem_reserve[]: 0 0 0 0 0 [ 913.217687] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 20*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10496kB [ 913.248555] Node 0 DMA32: 31*4kB (MEH) 635*8kB (UMH) 890*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35828kB [ 913.280083] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 913.300462] Node 1 Normal: 153*4kB (UME) 209*8kB (UME) 219*16kB (UME) 120*32kB (UME) 55*64kB (UM) 9*128kB (M) 6*256kB (M) 5*512kB (M) 6*1024kB (ME) 4*2048kB (ME) 437*4096kB (M) = 1822684kB [ 913.343409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.365926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 913.383611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.406355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 913.428372] 16600 total pagecache pages [ 913.439987] 0 pages in swap cache [ 913.448066] Swap cache stats: add 0, delete 0, find 0/0 [ 913.462610] Free swap = 0kB [ 913.469098] Total swap = 0kB 04:55:28 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2) [ 913.478994] 1965979 pages RAM [ 913.485544] 0 pages HighMem/MovableOnly [ 913.492955] 335871 pages reserved [ 913.504503] 0 pages cma reserved 04:55:28 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10000, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="12000000", 0x4, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2) 04:55:28 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) mlockall(0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900ffff0016000000a6ec7e053c87475c0000000c7d88000000140c44124bd8f878e638f8cb7002bee923aee78e58ddc76efbc7ae2d90bf0ea86e72d74898118fc7afce53bdd1dceaba2d46f741ca9b17c465d35b73179c138a340e8eef128d47d309620ab2ac897a9a52310f7c12a900670baee261c3a942e0efa85ebf56a1b0"], 0x1}}, 0x0) [ 913.644396] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 913.693416] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 913.695958] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 913.710441] CPU: 1 PID: 15060 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 913.725651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.735021] Call Trace: [ 913.735036] syz-executor.4 cpuset= [ 913.737623] dump_stack+0x142/0x197 [ 913.737641] warn_alloc.cold+0x96/0x1af [ 913.737651] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 913.737670] ? check_preemption_disabled+0x3c/0x250 [ 913.751423] syz4 [ 913.753643] ? retint_kernel+0x2d/0x2d [ 913.764664] __alloc_pages_slowpath+0x23c6/0x2930 [ 913.769534] ? warn_alloc+0xf0/0xf0 [ 913.772821] mems_allowed=0-1 [ 913.773172] ? __might_sleep+0x93/0xb0 [ 913.773185] __alloc_pages_nodemask+0x62c/0x7a0 [ 913.773198] ? rcu_read_lock_sched_held+0x110/0x130 [ 913.789847] ? __alloc_pages_slowpath+0x2930/0x2930 [ 913.794880] alloc_pages_current+0xec/0x1e0 [ 913.799222] kvm_mmu_create+0xdf/0x1e0 [ 913.803120] kvm_arch_vcpu_init+0x29c/0x8e0 [ 913.807446] kvm_vcpu_init+0x272/0x360 [ 913.811341] vmx_create_vcpu+0xfc/0x2aa0 [ 913.815405] ? mutex_trylock+0x1c0/0x1c0 [ 913.819475] ? handle_rdmsr+0x6e0/0x6e0 [ 913.823450] ? wait_for_completion+0x420/0x420 [ 913.828040] kvm_arch_vcpu_create+0x8c/0xc0 [ 913.832370] kvm_vm_ioctl+0x501/0x1600 [ 913.836265] ? __lock_acquire+0x5f7/0x4620 [ 913.840510] ? kvm_vcpu_release+0xa0/0xa0 [ 913.844660] ? trace_hardirqs_on+0x10/0x10 [ 913.848905] ? trace_hardirqs_on+0x10/0x10 [ 913.853144] ? __might_fault+0x110/0x1d0 [ 913.857213] ? save_trace+0x290/0x290 [ 913.861022] ? trace_hardirqs_on_caller+0x400/0x590 [ 913.866042] ? __fget+0x210/0x370 [ 913.869502] ? find_held_lock+0x35/0x130 [ 913.873570] ? __fget+0x210/0x370 [ 913.877030] ? kvm_vcpu_release+0xa0/0xa0 [ 913.881183] do_vfs_ioctl+0x7ae/0x1060 [ 913.885078] ? selinux_file_mprotect+0x5d0/0x5d0 [ 913.889838] ? lock_downgrade+0x740/0x740 [ 913.893993] ? ioctl_preallocate+0x1c0/0x1c0 [ 913.898409] ? __fget+0x237/0x370 [ 913.901874] ? security_file_ioctl+0x89/0xb0 [ 913.906290] SyS_ioctl+0x8f/0xc0 [ 913.909658] ? do_vfs_ioctl+0x1060/0x1060 [ 913.913815] do_syscall_64+0x1e8/0x640 [ 913.917710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 913.922565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 913.927751] RIP: 0033:0x45af49 [ 913.930936] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.938644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 913.945910] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 913.953184] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 913.960462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 913.967734] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 913.975998] CPU: 0 PID: 15066 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0 [ 913.983897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.993238] Call Trace: [ 913.995844] dump_stack+0x142/0x197 [ 913.999487] warn_alloc.cold+0x96/0x1af [ 914.003452] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 914.008304] ? wait_for_completion+0x420/0x420 [ 914.012880] __alloc_pages_slowpath+0x23c6/0x2930 [ 914.017720] ? warn_alloc+0xf0/0xf0 [ 914.021341] ? __might_sleep+0x93/0xb0 [ 914.025217] __alloc_pages_nodemask+0x62c/0x7a0 [ 914.029880] ? __alloc_pages_slowpath+0x2930/0x2930 [ 914.034898] ? check_preemption_disabled+0x3c/0x250 [ 914.039907] alloc_pages_current+0xec/0x1e0 [ 914.044214] kvm_mmu_create+0xdf/0x1e0 [ 914.048087] kvm_arch_vcpu_init+0x29c/0x8e0 [ 914.052404] kvm_vcpu_init+0x272/0x360 [ 914.056275] vmx_create_vcpu+0xfc/0x2aa0 [ 914.060320] ? mutex_trylock+0x1c0/0x1c0 [ 914.064453] ? handle_rdmsr+0x6e0/0x6e0 [ 914.068415] ? wait_for_completion+0x420/0x420 [ 914.072983] kvm_arch_vcpu_create+0x8c/0xc0 [ 914.077289] kvm_vm_ioctl+0x501/0x1600 [ 914.081161] ? __lock_acquire+0x5f7/0x4620 [ 914.085381] ? kvm_vcpu_release+0xa0/0xa0 [ 914.089511] ? trace_hardirqs_on+0x10/0x10 [ 914.093737] ? retint_kernel+0x2d/0x2d [ 914.097621] ? trace_hardirqs_on_caller+0x400/0x590 [ 914.102622] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 914.107361] ? save_trace+0x290/0x290 [ 914.111154] ? check_preemption_disabled+0x3c/0x250 [ 914.116164] ? __fget+0x210/0x370 [ 914.119612] ? find_held_lock+0x35/0x130 [ 914.123658] ? __fget+0x210/0x370 [ 914.127098] ? kvm_vcpu_release+0xa0/0xa0 [ 914.131230] do_vfs_ioctl+0x7ae/0x1060 [ 914.135100] ? selinux_file_mprotect+0x5d0/0x5d0 [ 914.139839] ? lock_downgrade+0x740/0x740 [ 914.143979] ? ioctl_preallocate+0x1c0/0x1c0 [ 914.148370] ? __fget+0x237/0x370 [ 914.151925] ? security_file_ioctl+0x89/0xb0 [ 914.156333] SyS_ioctl+0x8f/0xc0 [ 914.159732] ? do_vfs_ioctl+0x1060/0x1060 [ 914.163891] do_syscall_64+0x1e8/0x640 [ 914.167787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 914.172627] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 914.177817] RIP: 0033:0x45af49 [ 914.180994] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.188692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 914.195956] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 914.203220] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 914.210473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4 [ 914.217731] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff 04:55:29 executing program 1: wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) [ 914.383612] Mem-Info: [ 914.408953] active_anon:859840 inactive_anon:1747 isolated_anon:0 [ 914.408953] active_file:4200 inactive_file:5726 isolated_file:0 [ 914.408953] unevictable:9551 dirty:22 writeback:0 unstable:0 [ 914.408953] slab_reclaimable:15815 slab_unreclaimable:126580 [ 914.408953] mapped:64777 shmem:1791 pagetables:28012 bounce:0 [ 914.408953] free:467150 free_pcp:334 free_cma:0 [ 914.481520] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:12kB inactive_file:8kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:0kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 04:55:29 executing program 1: [ 914.542954] Node 1 active_anon:1557152kB inactive_anon:84kB active_file:16788kB inactive_file:22896kB unevictable:38180kB isolated(anon):0kB isolated(file):0kB mapped:44016kB dirty:88kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:55:29 executing program 1: 04:55:29 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10) r13 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r13, 0x0, 0xcb, &(0x7f0000000000), 0x10) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESHEX=r13, @ANYPTR, @ANYRESOCT, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRESHEX=r6, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r7], @ANYRESOCT, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX=r9, @ANYRESHEX=r10, @ANYRESHEX=r3, @ANYRESHEX=0x0]], @ANYRES64=r11, @ANYRESHEX=r12], 0x7b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 914.633776] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.687501] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 914.708745] Node 0 DMA32 free:35768kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:12kB inactive_file:8kB unevictable:24kB writepending:0kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:416kB local_pcp:188kB free_cma:0kB 04:55:29 executing program 1: [ 914.767661] lowmem_reserve[]: 0 0 0 0 0 [ 914.799998] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:55:29 executing program 1: [ 914.853747] lowmem_reserve[]: 0 0 0 0 0 [ 914.858020] Node 1 Normal free:1821636kB min:53508kB low:66884kB high:80260kB active_anon:1557352kB inactive_anon:84kB active_file:16788kB inactive_file:22896kB unevictable:38180kB writepending:236kB present:3932160kB managed:3870192kB mlocked:38184kB kernel_stack:20512kB pagetables:47272kB bounce:0kB free_pcp:1052kB local_pcp:504kB free_cma:0kB 04:55:29 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x9, 0x0, 0x3, 0x1000}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:29 executing program 4: [ 915.065295] lowmem_reserve[]: 0 0 0 0 0 [ 915.069800] Node 0 DMA: 3*4kB (UM) 14*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10476kB [ 915.147049] Node 0 DMA32: 32*4kB (UMEH) 648*8kB (UMH) 891*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB [ 915.164637] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 915.176069] Node 1 Normal: 183*4kB (UME) 128*8kB (UME) 365*16kB (UM) 139*32kB (UME) 56*64kB (UME) 10*128kB (UM) 10*256kB (UME) 10*512kB (UME) 5*1024kB (M) 4*2048kB (UME) 436*4096kB (M) = 1823756kB [ 915.284175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.311721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.337958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 915.364580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 915.377158] 16615 total pagecache pages [ 915.381670] 0 pages in swap cache 04:55:30 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2) [ 915.385305] Swap cache stats: add 0, delete 0, find 0/0 [ 915.394484] Free swap = 0kB [ 915.397692] Total swap = 0kB [ 915.401176] 1965979 pages RAM [ 915.404421] 0 pages HighMem/MovableOnly [ 915.408549] 335871 pages reserved [ 915.415799] 0 pages cma reserved 04:55:30 executing program 1: 04:55:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000012c0)=ANY=[@ANYBLOB="0481"]) 04:55:30 executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000007279a945eecb03fabf8e3edc6fed3053c38075aac8735e84bb6597f4740811a244bbaf34532a58e2e1f44c4e4dff9104eedecf73a149811a97feff163ed59784e08520f31fbce8a495b0001f9c9a219e77c187b787bbbedc34a60045403af6a595f28475039f0b4c7cd7ccad9aab929bb7b84ed8659e860b1e376bbdf0", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000950e372f402ac27b74085e6dd9556dc4915e2f7ecbb54eaa8ba7fef596252202cfc30438821e2d6171b701e3e61689529128754d74b9a9ade08600422fa286d89764796534f6cd80f10e50abbcbb66beefc40d75b9e10a354cb80233c7bd9a459d00984dff916b5af6fdd4a539726076025e1d10df704f05b4040b1d5a1f35a124d1530b97da4010915c714b6815e7c41df7c41cf7b07a30df24d159b38046c94a1431438e4dedbca90eb09feee37ff8a12cce61ed250d6577ce1babb6b18b4376ecdcd2c6a242359211acd234808a240a5dcfebcb0c8448172b344bd176103f7390c1748fdccf3823"], &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) [ 915.505370] usb usb2: usbfs: process 15109 (syz-executor.4) did not claim interface 0 before use 04:55:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x40, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="14b1df25", 0x4, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @empty}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x74100, 0x0) [ 915.644843] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 915.681129] net_ratelimit: 6 callbacks suppressed [ 915.681134] protocol 88fb is buggy, dev hsr_slave_0 [ 915.691164] protocol 88fb is buggy, dev hsr_slave_1 [ 915.715762] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 915.731365] CPU: 1 PID: 15112 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 915.739289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.739299] Call Trace: [ 915.751256] dump_stack+0x142/0x197 [ 915.754893] warn_alloc.cold+0x96/0x1af [ 915.758873] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 915.763727] ? check_preemption_disabled+0x3c/0x250 [ 915.768748] ? retint_kernel+0x2d/0x2d [ 915.772652] __alloc_pages_slowpath+0x23c6/0x2930 [ 915.777515] ? warn_alloc+0xf0/0xf0 [ 915.781161] ? __might_sleep+0x93/0xb0 [ 915.785056] __alloc_pages_nodemask+0x62c/0x7a0 [ 915.789733] ? rcu_read_lock_sched_held+0x110/0x130 [ 915.789746] ? __alloc_pages_slowpath+0x2930/0x2930 [ 915.789766] alloc_pages_current+0xec/0x1e0 [ 915.789780] kvm_mmu_create+0xdf/0x1e0 [ 915.808020] kvm_arch_vcpu_init+0x29c/0x8e0 [ 915.812368] kvm_vcpu_init+0x272/0x360 [ 915.816266] vmx_create_vcpu+0xfc/0x2aa0 [ 915.820336] ? mutex_trylock+0x1c0/0x1c0 [ 915.824414] ? handle_rdmsr+0x6e0/0x6e0 [ 915.828399] ? wait_for_completion+0x420/0x420 [ 915.833009] kvm_arch_vcpu_create+0x8c/0xc0 [ 915.837346] kvm_vm_ioctl+0x501/0x1600 [ 915.841237] ? __lock_acquire+0x5f7/0x4620 [ 915.845477] ? kvm_vcpu_release+0xa0/0xa0 [ 915.849629] ? trace_hardirqs_on+0x10/0x10 [ 915.853874] ? trace_hardirqs_on+0x10/0x10 [ 915.858112] ? __might_fault+0x110/0x1d0 [ 915.862175] ? save_trace+0x290/0x290 [ 915.865991] ? trace_hardirqs_on_caller+0x400/0x590 [ 915.871013] ? __fget+0x210/0x370 [ 915.874483] ? find_held_lock+0x35/0x130 [ 915.878550] ? __fget+0x210/0x370 [ 915.882009] ? kvm_vcpu_release+0xa0/0xa0 [ 915.886159] do_vfs_ioctl+0x7ae/0x1060 [ 915.890051] ? selinux_file_mprotect+0x5d0/0x5d0 [ 915.894813] ? lock_downgrade+0x740/0x740 [ 915.898968] ? ioctl_preallocate+0x1c0/0x1c0 [ 915.903386] ? __fget+0x237/0x370 [ 915.906854] ? security_file_ioctl+0x89/0xb0 [ 915.911277] SyS_ioctl+0x8f/0xc0 [ 915.914648] ? do_vfs_ioctl+0x1060/0x1060 [ 915.918803] do_syscall_64+0x1e8/0x640 [ 915.922693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 915.927543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 915.932734] RIP: 0033:0x45af49 [ 915.936271] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.943982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 915.951252] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 915.958524] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 915.965797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 915.973069] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 915.983934] warn_alloc_show_mem: 1 callbacks suppressed [ 915.983951] Mem-Info: [ 915.992361] active_anon:859854 inactive_anon:1747 isolated_anon:0 [ 915.992361] active_file:4200 inactive_file:5738 isolated_file:0 [ 915.992361] unevictable:9533 dirty:28 writeback:0 unstable:0 [ 915.992361] slab_reclaimable:15836 slab_unreclaimable:126739 04:55:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmdt(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) socket$inet(0x2, 0x4000000805, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000100)=0x8000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x3fa0996ed73daa6f, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000200), &(0x7f0000000240)=0x4) 04:55:30 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x10841, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44b204}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="20010009", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRESOCT, @ANYRESHEX], @ANYRES16=r8], @ANYBLOB="00002dbd7000fbdbdf25060000001c00010008000300070000000d0001007564703a73797a3100000000640005001c00020008000200310e00000800010019000000080002000800000007000100696200003c000200080001001d000000080003000b170000080003000500000008000200285100000800040003000000080002000200000008000100160000001400090008000200010000000800020004000000340007000c00040001040000000000000800010004000200070000000c000400001000000000000008000100060000004400090008000100000000000800010006000000080001000100000008000200060000000800020000000000080001000500000008000200030000000800010003000000"], 0x3}, 0x1, 0x0, 0x0, 0x20800}, 0x2000c000) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 915.992361] mapped:64752 shmem:1791 pagetables:28005 bounce:0 [ 915.992361] free:466934 free_pcp:401 free_cma:0 [ 916.027384] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:12kB inactive_file:8kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 916.087402] Node 1 active_anon:1557188kB inactive_anon:92kB active_file:16788kB inactive_file:22944kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:44000kB dirty:172kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 916.150528] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.178423] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 916.185923] Node 0 DMA32 free:36032kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:480kB local_pcp:216kB free_cma:0kB [ 916.216266] lowmem_reserve[]: 0 0 0 0 0 [ 916.221667] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 916.248301] lowmem_reserve[]: 0 0 0 0 0 [ 916.254688] Node 1 Normal free:1822736kB min:53508kB low:66884kB high:80260kB active_anon:1557292kB inactive_anon:84kB active_file:16788kB inactive_file:22968kB unevictable:38108kB writepending:152kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20544kB pagetables:47528kB bounce:0kB free_pcp:1384kB local_pcp:564kB free_cma:0kB [ 916.286584] lowmem_reserve[]: 0 0 0 0 0 [ 916.291756] Node 0 DMA: 3*4kB (UM) 14*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10476kB [ 916.309748] Node 0 DMA32: 32*4kB (UMEH) 656*8kB (UMH) 892*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36032kB [ 916.386231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 916.458222] Node 1 Normal: 76*4kB (UME) 172*8kB (UME) 338*16kB (UM) 144*32kB (UME) 56*64kB (UM) 11*128kB (ME) 9*256kB (UM) 9*512kB (ME) 5*1024kB (M) 4*2048kB (UME) 436*4096kB (M) = 1822768kB [ 916.557064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.599422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.645420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 916.654437] protocol 88fb is buggy, dev hsr_slave_0 [ 916.654490] protocol 88fb is buggy, dev hsr_slave_1 [ 916.654575] protocol 88fb is buggy, dev hsr_slave_0 [ 916.654628] protocol 88fb is buggy, dev hsr_slave_1 [ 916.691598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 916.704212] 16621 total pagecache pages [ 916.708467] 0 pages in swap cache [ 916.712398] Swap cache stats: add 0, delete 0, find 0/0 [ 916.717992] Free swap = 0kB [ 916.726623] Total swap = 0kB [ 916.729845] 1965979 pages RAM [ 916.733354] 0 pages HighMem/MovableOnly [ 916.737581] 335871 pages reserved [ 916.744934] 0 pages cma reserved 04:55:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2) [ 916.892781] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 916.927828] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 916.939075] CPU: 0 PID: 15139 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 916.946989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.956344] Call Trace: [ 916.958938] dump_stack+0x142/0x197 [ 916.962579] warn_alloc.cold+0x96/0x1af [ 916.966560] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 916.971417] ? wait_for_completion+0x420/0x420 [ 916.976018] __alloc_pages_slowpath+0x23c6/0x2930 [ 916.980872] ? retint_kernel+0x2d/0x2d [ 916.984770] ? warn_alloc+0xf0/0xf0 [ 916.995443] ? check_preemption_disabled+0x3c/0x250 [ 917.000471] ? retint_kernel+0x2d/0x2d [ 917.004377] __alloc_pages_nodemask+0x62c/0x7a0 [ 917.009061] ? rcu_read_lock_sched_held+0x110/0x130 [ 917.014088] ? __alloc_pages_slowpath+0x2930/0x2930 [ 917.019112] ? check_preemption_disabled+0x3c/0x250 [ 917.024138] alloc_pages_current+0xec/0x1e0 [ 917.028469] kvm_mmu_create+0xdf/0x1e0 [ 917.032363] kvm_arch_vcpu_init+0x29c/0x8e0 [ 917.036694] kvm_vcpu_init+0x272/0x360 [ 917.040588] vmx_create_vcpu+0xfc/0x2aa0 [ 917.044655] ? mutex_trylock+0x1c0/0x1c0 [ 917.048729] ? handle_rdmsr+0x6e0/0x6e0 [ 917.052707] ? wait_for_completion+0x420/0x420 [ 917.057294] kvm_arch_vcpu_create+0x8c/0xc0 [ 917.061625] kvm_vm_ioctl+0x501/0x1600 [ 917.065513] ? __lock_acquire+0x5f7/0x4620 [ 917.069755] ? kvm_vcpu_release+0xa0/0xa0 [ 917.073907] ? trace_hardirqs_on+0x10/0x10 [ 917.078152] ? trace_hardirqs_on+0x10/0x10 [ 917.082389] ? __might_fault+0x110/0x1d0 [ 917.086456] ? save_trace+0x290/0x290 [ 917.090258] ? __might_fault+0x110/0x1d0 [ 917.094340] ? __fget+0x210/0x370 [ 917.097795] ? find_held_lock+0x35/0x130 [ 917.101859] ? __fget+0x210/0x370 [ 917.105320] ? kvm_vcpu_release+0xa0/0xa0 [ 917.109471] do_vfs_ioctl+0x7ae/0x1060 [ 917.113367] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 917.118129] ? ioctl_preallocate+0x1c0/0x1c0 [ 917.122542] ? check_preemption_disabled+0x3c/0x250 [ 917.127565] ? retint_kernel+0x2d/0x2d [ 917.131469] SyS_ioctl+0x8f/0xc0 [ 917.134837] ? do_vfs_ioctl+0x1060/0x1060 [ 917.138997] do_syscall_64+0x1e8/0x640 [ 917.142887] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 917.147738] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 917.152931] RIP: 0033:0x45af49 [ 917.156116] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.163832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 917.173621] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 917.180908] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 917.188180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 917.195453] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff 04:55:31 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) sendfile(0xffffffffffffffff, r5, 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 917.440180] protocol 88fb is buggy, dev hsr_slave_0 [ 917.445472] protocol 88fb is buggy, dev hsr_slave_1 [ 917.571914] Mem-Info: [ 917.578108] active_anon:859871 inactive_anon:1747 isolated_anon:0 [ 917.578108] active_file:4201 inactive_file:5748 isolated_file:0 [ 917.578108] unevictable:9533 dirty:18 writeback:0 unstable:0 [ 917.578108] slab_reclaimable:15866 slab_unreclaimable:126259 [ 917.578108] mapped:64752 shmem:1791 pagetables:28013 bounce:0 [ 917.578108] free:467404 free_pcp:385 free_cma:0 [ 917.687831] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 917.752148] Node 1 active_anon:1557376kB inactive_anon:84kB active_file:16788kB inactive_file:22988kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:43916kB dirty:68kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 917.780570] protocol 88fb is buggy, dev hsr_slave_0 [ 917.780625] protocol 88fb is buggy, dev hsr_slave_1 [ 917.833753] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 917.860443] lowmem_reserve[]: 0 2569 2569 2569 2569 04:55:32 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b705369b2623", 0x18}], 0x1) [ 917.865727] Node 0 DMA32 free:36088kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:392kB local_pcp:200kB free_cma:0kB [ 917.896447] lowmem_reserve[]: 0 0 0 0 0 [ 917.900836] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 917.944616] lowmem_reserve[]: 0 0 0 0 0 [ 917.948771] Node 1 Normal free:1822428kB min:53508kB low:66884kB high:80260kB active_anon:1557376kB inactive_anon:84kB active_file:16788kB inactive_file:22988kB unevictable:38108kB writepending:68kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20448kB pagetables:47424kB bounce:0kB free_pcp:696kB local_pcp:300kB free_cma:0kB [ 917.984631] lowmem_reserve[]: 0 0 0 0 0 04:55:32 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 917.988774] Node 0 DMA: 3*4kB (UM) 14*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10476kB [ 918.014144] Node 0 DMA32: 32*4kB (UMEH) 663*8kB (UMH) 892*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36088kB [ 918.049094] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 918.064395] Node 1 Normal: 58*4kB (UME) 112*8kB (UME) 385*16kB (UME) 163*32kB (UME) 56*64kB (UM) 12*128kB (UME) 8*256kB (M) 10*512kB (UME) 6*1024kB (UM) 3*2048kB (ME) 436*4096kB (M) = 1822936kB 04:55:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0) socket$inet(0x2, 0x4000000805, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000100)=0x8000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x3fa0996ed73daa6f, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 918.093061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 918.093069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 918.093076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 04:55:32 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r5, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 918.093082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 918.093086] 16634 total pagecache pages [ 918.093097] 0 pages in swap cache [ 918.093103] Swap cache stats: add 0, delete 0, find 0/0 [ 918.093106] Free swap = 0kB [ 918.093110] Total swap = 0kB [ 918.093116] 1965979 pages RAM [ 918.093119] 0 pages HighMem/MovableOnly [ 918.093122] 335871 pages reserved [ 918.093126] 0 pages cma reserved 04:55:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = open(0x0, 0x4000000000141042, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="39d1751ff71ec04e0364fa305802f55ce63da4bedd196ad41eed24818f786971be3f372e34a69f9bb77d43dcb813dc41c990c82802de8238df5c8fdeddce5f4b73099886209f1e3638b609be6c12b7d8f7018ff56842ceaf9bbd42d365f7acf70ca0f4546c439d6755c448715a3dea7fe3761068f8caabb32687a51f714c0d6bbb0e6b8248494298356eaaca24d5c204564e5ae54bc3585a3fa051dce43f4bed9e1e1104db1e0611823f45aa8aa9d7280c1b1d30e633448c642e3a8c0f3b899cedc24d6b3b84a68e4866ea1d53776f65e874e0212c1e973abe1bb5", 0xdb}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1101}, [@IFLA_LINKINFO={0x4c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x3c, 0x2, [@gre_common_policy=[@IFLA_GRE_TTL={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8001}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x5d28}], @gre_common_policy=[@IFLA_GRE_LINK={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]]}}}]}, 0x6c}}, 0x0) 04:55:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)=""/236, 0xec}, {0x0}], 0x2, &(0x7f0000002740)=""/202, 0xca}, 0x7}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400}) 04:55:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)=""/236, 0xec}, {0x0}], 0x2, &(0x7f0000002740)=""/202, 0xca}, 0x7}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400}) 04:55:33 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400}) 04:55:33 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000000c0), 0x4) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x6280}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:33 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0) socket$inet(0x2, 0x4000000805, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000100)=0x8000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x3fa0996ed73daa6f, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000200), &(0x7f0000000240)=0x4) 04:55:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:34 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') r2 = dup(r0) sendfile(r2, r1, 0x0, 0x523) 04:55:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0x4) 04:55:34 executing program 1: r0 = socket$inet(0x2, 0x200000001, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @local, 0x1}, 0x10) 04:55:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 919.844648] audit: type=1400 audit(1578632134.449:103): avc: denied { map } for pid=15221 comm="syz-executor.1" path="/dev/nullb0" dev="devtmpfs" ino=1630 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 04:55:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:34 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x19b, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0xffffffa6) r4 = creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84000) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4) bind$netrom(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r6, 0x0, 0x30005, 0x0) 04:55:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0xff13) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 04:55:35 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:35 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:35 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) 04:55:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 920.800117] net_ratelimit: 12 callbacks suppressed 04:55:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 920.800123] protocol 88fb is buggy, dev hsr_slave_0 [ 920.800169] protocol 88fb is buggy, dev hsr_slave_1 [ 920.800267] protocol 88fb is buggy, dev hsr_slave_0 [ 920.800313] protocol 88fb is buggy, dev hsr_slave_1 04:55:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 920.931212] sd 0:0:1:0: [sg0] tag#6929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 920.931449] sd 0:0:1:0: [sg0] tag#6929 CDB: Test Unit Ready 04:55:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:35 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1582b65c7936814c, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000000200}, 0x2000, 0x1, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x8) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f00000004c0)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x39, "038856e9dafa19f0981c91eeabef2a168396e8bcff62a9c2fa3c1a8c0738dd136a1b0738b2397a51c7637be15967c44f632019bf15ac4dd71f"}, &(0x7f0000000280)=0x5d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x3}, 0x16, 0x2) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000340)=""/131, &(0x7f00000002c0)=0x83) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3, 0x2084, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x101, 0x4}, 0x40, 0x1ff, 0x5, 0x2, 0xffffffff, 0x1f, 0x1ff}, 0x0, 0x2, r6, 0x5) [ 920.931669] sd 0:0:1:0: [sg0] tag#6929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.931848] sd 0:0:1:0: [sg0] tag#6929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.932058] sd 0:0:1:0: [sg0] tag#6929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.932298] sd 0:0:1:0: [sg0] tag#6929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.932448] sd 0:0:1:0: [sg0] tag#6929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.932608] sd 0:0:1:0: [sg0] tag#6929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.932786] sd 0:0:1:0: [sg0] tag#6929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.933049] sd 0:0:1:0: [sg0] tag#6929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.933317] sd 0:0:1:0: [sg0] tag#6929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.933478] sd 0:0:1:0: [sg0] tag#6929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.933658] sd 0:0:1:0: [sg0] tag#6929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.933869] sd 0:0:1:0: [sg0] tag#6929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.934088] sd 0:0:1:0: [sg0] tag#6929 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 920.934286] sd 0:0:1:0: [sg0] tag#6929 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 920.934459] sd 0:0:1:0: [sg0] tag#6929 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:55:36 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 921.600784] protocol 88fb is buggy, dev hsr_slave_0 [ 921.601333] protocol 88fb is buggy, dev hsr_slave_1 [ 921.738632] sd 0:0:1:0: [sg0] tag#6929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 921.738924] sd 0:0:1:0: [sg0] tag#6929 CDB: Test Unit Ready [ 921.739170] sd 0:0:1:0: [sg0] tag#6929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.739369] sd 0:0:1:0: [sg0] tag#6929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.739519] sd 0:0:1:0: [sg0] tag#6929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:36 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) 04:55:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 921.739711] sd 0:0:1:0: [sg0] tag#6929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000)) [ 921.739909] sd 0:0:1:0: [sg0] tag#6929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.740219] sd 0:0:1:0: [sg0] tag#6929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.740439] sd 0:0:1:0: [sg0] tag#6929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000)) [ 921.740608] sd 0:0:1:0: [sg0] tag#6929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.740769] sd 0:0:1:0: [sg0] tag#6929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:36 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r7, @ANYRES64=r8/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', r6}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 921.740928] sd 0:0:1:0: [sg0] tag#6929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.741137] sd 0:0:1:0: [sg0] tag#6929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000)) [ 921.741295] sd 0:0:1:0: [sg0] tag#6929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.741568] sd 0:0:1:0: [sg0] tag#6929 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.741809] sd 0:0:1:0: [sg0] tag#6929 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.742009] sd 0:0:1:0: [sg0] tag#6929 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:55:37 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 921.920149] protocol 88fb is buggy, dev hsr_slave_0 [ 921.920186] protocol 88fb is buggy, dev hsr_slave_1 [ 921.963473] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 04:55:37 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 921.963800] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready [ 921.963980] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.964131] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.964351] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.964509] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.964679] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.964801] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.964960] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.965129] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.965251] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.965429] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.965572] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.965753] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.965971] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:37 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:37 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:37 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) [ 921.966151] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 921.966319] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.880131] protocol 88fb is buggy, dev hsr_slave_0 [ 922.880217] protocol 88fb is buggy, dev hsr_slave_1 04:55:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 922.963751] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 922.972899] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready 04:55:37 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000340)={0x1000, ""/4096}) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="ce00000093090000d51d4afb30ab8b97929d4767c12131d3a42d18a40291ecdf99357ad992c3a14aece970234d9f4bef53fc28fbe674c1172a004855be5d7a21ee245e5f442d1526280c4c9f25bf16e5831ef13ff7ceb4a7a6dcd889573ec3dc0b7798bdf54e98d08ec66ade123b55fde9bd403b5cd6374ea8a9b5e5827bd5930a2738c91dd7164fbcf8e638e55f10fdbb4030b016d91df9c7d14cf0c6062c0e02b7a6363251c8f5c907a36bf33706632b74cf6bca9e0c1cd2e25dc5f21bd467c248780f69203bf5dd"], &(0x7f0000000100), 0x200) 04:55:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 922.979019] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.979228] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 922.979387] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.979641] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.980277] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 922.980479] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 922.980658] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.980858] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.981036] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.981247] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.981429] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 922.981607] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.981777] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 922.981956] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 922.982115] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:55:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:38 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) 04:55:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 924.039979] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 924.040606] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready [ 924.040806] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.041005] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.041165] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.041327] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 924.041507] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.041685] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.041866] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 924.042044] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:38 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r7, &(0x7f00000017c0), 0x2cb, 0x400000000000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r7, &(0x7f0000000200)='./bus\x00', r9, r10, 0x400) r11 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f0000000480)=0x0) r13 = getgid() r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r15) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x397) setuid(r17) r18 = getegid() write$FUSE_DIRENTPLUS(r5, &(0x7f00000004c0)={0x2a8, 0x0, 0x6, [{{0x3, 0x0, 0x1f, 0x2, 0xc28, 0x7f, {0x0, 0x2369, 0x3, 0x0, 0x6, 0x1cb, 0x40, 0x2539, 0x1, 0x80000000, 0x7, r6, r10, 0x1, 0x400}}, {0x0, 0x10001, 0x0, 0x22}}, {{0x0, 0x0, 0x0, 0x20c, 0x7, 0x2, {0x3, 0x9, 0x7, 0x4, 0x3f, 0x5, 0x9, 0x3, 0xf54, 0x0, 0x9, r12, r13, 0x7, 0x6}}, {0x5, 0x1e, 0x26, 0x186, 'GPLwlan0*lonodevselinuxGPL)user+md5sum'}}, {{0x3, 0x0, 0xfffffffffffeffff, 0x6, 0x4, 0x602, {0x6, 0x401, 0x4, 0x1, 0x4, 0x4, 0x3, 0x3, 0x7fffffff, 0x2, 0x29, r15, 0xee00, 0xfffffff9, 0x5}}, {0x3, 0x3, 0x5, 0x5, 'ppp1)'}}, {{0x2, 0x0, 0x3, 0xffffffffffffffc1, 0x401, 0x1, {0x5, 0x8, 0x4, 0x2, 0x5, 0x4, 0x8, 0x8, 0xffff8001, 0x7fff, 0x7, r17, r18, 0x1ff, 0x583c}}, {0x2, 0x400, 0x1, 0x9, '%'}}]}, 0x2a8) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r19 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r19, 0x0, 0xcb, &(0x7f0000000000), 0x10) connect$inet(r19, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r20 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r20, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$netlink_NETLINK_RX_RING(r20, 0x10e, 0x6, &(0x7f00000002c0)={0x0, 0x1, 0xd70b, 0x80000001}, 0x10) r21 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8301, 0x80) getsockopt$IP_VS_SO_GET_SERVICE(r21, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 924.042295] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.042454] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 924.042617] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.042836] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:39 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000)) [ 924.042965] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:39 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000)) [ 924.043125] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 924.043383] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:55:39 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:39 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0x0, &(0x7f0000000000)) 04:55:39 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) 04:55:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0x0, &(0x7f0000000000)) 04:55:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0x0, &(0x7f0000000000)) [ 925.072763] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 04:55:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, 0x0) [ 925.072978] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready [ 925.073221] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:39 executing program 5: r0 = getpid() capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x10000, 0x4, 0x2, 0x4, 0x7fff, 0xa00}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r1, 0x0, r5, 0x0, 0x30005, 0x0) 04:55:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, 0x0) [ 925.073509] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.073660] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x100000, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r3}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x12) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) [ 925.073850] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, 0x0) [ 925.074021] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x3400) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) [ 925.074200] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.074340] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.074490] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:40 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e265600000800490d524fa45780fbe1924a1f42bad5b433d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd06d4026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627dbaaf582393a2944b5f39be22eea4717fbc7bf1744386f4f70511a75d9afc60ba10f1fa55313f5683a709a5b0bf03005c4015cc0000000000001dbc3d7b48529175c97a1e48f918018d49cac053da9f58ae69f4c78751203b47c9a8a5074b4c6f4a8d9e1398fce2ab8959853f2d04ef26ac028d938e730b8e435aeb43f2ad789900000000000000000000009450003333ece2f9488cdbd16155ad5578d57ffe9ea25556354da491f265617cb943014b01b02587b3d3692e3c672da61a09aabf2d0a3bbc9dd3ad0d8f809cbea5aab8fd639ea795e57d6531a19783334b006ab7"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) [ 925.074651] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.074911] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.075121] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.075329] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.075499] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.075718] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.075975] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.395675] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 925.801930] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 925.802199] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready [ 925.802450] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.802708] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.802928] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.803130] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.803388] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.803579] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.803779] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.803959] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.804159] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.804338] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.804681] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.804918] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.805118] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.805317] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 925.805539] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:55:41 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:41 executing program 0: 04:55:41 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0xfff}}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x38902) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) 04:55:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000200)={0x3, 0x0, {0x0, 0x2, 0x0, 0x10, 0xe, 0xe, 0x0, 0x6}}) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x3) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x4}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) recvfrom$inet(r4, &(0x7f0000000140)=""/41, 0x29, 0x20000001, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3, r5}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000001c0)=0x8dec) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) [ 926.080247] net_ratelimit: 12 callbacks suppressed [ 926.080253] protocol 88fb is buggy, dev hsr_slave_0 [ 926.080292] protocol 88fb is buggy, dev hsr_slave_1 04:55:41 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x50402, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000640)={r7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={r7, 0x9}, &(0x7f0000000240)=0x8) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r8, &(0x7f0000000680)=""/4096, 0x1000, 0x2023, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) 04:55:41 executing program 0: 04:55:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x246325d85669541b, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) recvmsg$can_raw(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/131, 0x83}, {&(0x7f0000001340)=""/88, 0x58}], 0x7, &(0x7f0000001440)=""/89, 0x59}, 0x10000) 04:55:41 executing program 3: 04:55:41 executing program 0: 04:55:41 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) 04:55:41 executing program 3: [ 926.953855] sd 0:0:1:0: [sg0] tag#6929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 926.963485] sd 0:0:1:0: [sg0] tag#6929 CDB: Test Unit Ready [ 926.969543] sd 0:0:1:0: [sg0] tag#6929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 926.979080] sd 0:0:1:0: [sg0] tag#6929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 926.988306] sd 0:0:1:0: [sg0] tag#6929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 926.997484] sd 0:0:1:0: [sg0] tag#6929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.006753] sd 0:0:1:0: [sg0] tag#6929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.016882] sd 0:0:1:0: [sg0] tag#6929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.026114] sd 0:0:1:0: [sg0] tag#6929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.036503] sd 0:0:1:0: [sg0] tag#6929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.046581] protocol 88fb is buggy, dev hsr_slave_0 [ 927.047259] protocol 88fb is buggy, dev hsr_slave_1 [ 927.048322] protocol 88fb is buggy, dev hsr_slave_0 [ 927.048740] protocol 88fb is buggy, dev hsr_slave_1 [ 927.069334] sd 0:0:1:0: [sg0] tag#6929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.078543] sd 0:0:1:0: [sg0] tag#6929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.087694] sd 0:0:1:0: [sg0] tag#6929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:41 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:41 executing program 3: 04:55:41 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) [ 927.096973] sd 0:0:1:0: [sg0] tag#6929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.106134] sd 0:0:1:0: [sg0] tag#6929 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.115349] sd 0:0:1:0: [sg0] tag#6929 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 927.124563] sd 0:0:1:0: [sg0] tag#6929 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 04:55:41 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) unshare(0xc000000) 04:55:41 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x20000, 0x0) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r3, @ANYRES64=r4/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r7, @ANYRES64=r8/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r10}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r11, @ANYRES64=r12/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'}) r13 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r13, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r14}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r15, @ANYRES64=r16/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @dev}, &(0x7f0000000200)=0xc) r17 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r17, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r18}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r19, @ANYRES64=r20/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000004480)={0x0, @vsock={0x28, 0x0, 0x2711}, @l2tp={0x2, 0x0, @local, 0x3}, @can, 0x6, 0x0, 0x0, 0x0, 0xa36b, &(0x7f0000004440)='veth1_vlan\x00', 0x0, 0x3, 0x2}) r21 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r21, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockname$packet(r21, &(0x7f00000045c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004600)=0x14) r22 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r22, 0x112, 0xa, &(0x7f0000000040), 0x4) recvmsg$can_bcm(r22, &(0x7f0000006a00)={&(0x7f00000067c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000006980)=[{&(0x7f0000006840)=""/87, 0x57}, {&(0x7f00000068c0)=""/157, 0x9d}], 0x2, &(0x7f00000069c0)=""/38, 0x26}, 0x10042) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006a40)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000006b40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast1}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000a40)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r17, &(0x7f00000070c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007080)={&(0x7f0000000a80)={0x4fc, r0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x4fc}, 0x1, 0x0, 0x0, 0xc848}, 0x80) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r23 = socket$inet(0x2, 0x3, 0x2) r24 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x200, 0x0) ioctl$TIOCGWINSZ(r24, 0x5413, &(0x7f0000000080)) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) setsockopt$inet_int(r23, 0x0, 0xcb, &(0x7f0000000000), 0x10) r25 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r25, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 04:55:42 executing program 0: sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) 04:55:42 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000100)}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000100)={0x7, 'rose0\x00', {0x4}, 0x7}) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) recvfrom$llc(r4, &(0x7f0000000200)=""/193, 0xc1, 0x4c9efad24d6599aa, &(0x7f00000000c0)={0x1a, 0x5, 0x4, 0x5, 0x3, 0x0, @random="ecf497b5be17"}, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x0, 0x0) bind$netrom(r5, 0x0, 0xfffffffffffffe29) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r6, 0x0, 0x30005, 0x0) 04:55:42 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(r4, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[]]) dup2(r5, r4) 04:55:42 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x5, 0x8, 0xff, 0x9, 0x2, 0x0, 0x6, 0x2}}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) [ 927.643108] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 927.644102] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 927.644804] CPU: 0 PID: 15518 Comm: syz-executor.3 Not tainted 4.14.163-syzkaller #0 [ 927.644814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.644818] Call Trace: [ 927.644838] dump_stack+0x142/0x197 [ 927.644854] warn_alloc.cold+0x96/0x1af [ 927.644865] ? zone_watermark_ok_safe+0x2b0/0x2b0 04:55:42 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1) getrlimit(0x2, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380)) msgget$private(0x0, 0x0) r1 = msgget$private(0x0, 0x8) msgsnd(r1, 0x0, 0xa3, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0xc00) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5) ftruncate(r2, 0xc00000) read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3) 04:55:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(r4, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[]]) dup2(r5, r4) [ 927.644886] ? wait_for_completion+0x420/0x420 [ 927.644904] __alloc_pages_slowpath+0x23c6/0x2930 [ 927.644926] ? warn_alloc+0xf0/0xf0 [ 927.644945] ? __might_sleep+0x93/0xb0 [ 927.644957] __alloc_pages_nodemask+0x62c/0x7a0 [ 927.644969] ? rcu_read_lock_sched_held+0x110/0x130 [ 927.644979] ? __alloc_pages_slowpath+0x2930/0x2930 [ 927.644998] alloc_pages_current+0xec/0x1e0 [ 927.645011] kvm_mmu_create+0xdf/0x1e0 [ 927.645023] kvm_arch_vcpu_init+0x29c/0x8e0 [ 927.645036] kvm_vcpu_init+0x272/0x360 [ 927.645048] vmx_create_vcpu+0xfc/0x2aa0 [ 927.645056] ? mutex_trylock+0x1c0/0x1c0 [ 927.645071] ? handle_rdmsr+0x6e0/0x6e0 [ 927.645079] ? wait_for_completion+0x420/0x420 [ 927.645092] kvm_arch_vcpu_create+0x8c/0xc0 [ 927.645103] kvm_vm_ioctl+0x501/0x1600 [ 927.645113] ? __lock_acquire+0x5f7/0x4620 [ 927.645123] ? get_unused_fd_flags+0xd0/0xd0 [ 927.645136] ? kvm_vcpu_release+0xa0/0xa0 [ 927.645146] ? trace_hardirqs_on+0x10/0x10 [ 927.645161] ? trace_hardirqs_on+0x10/0x10 [ 927.645170] ? __might_fault+0x110/0x1d0 [ 927.645180] ? save_trace+0x290/0x290 [ 927.645189] ? __might_fault+0x110/0x1d0 [ 927.645200] ? __fget+0x210/0x370 [ 927.645217] ? find_held_lock+0x35/0x130 [ 927.645229] ? __fget+0x210/0x370 [ 927.645242] ? kvm_vcpu_release+0xa0/0xa0 [ 927.645255] do_vfs_ioctl+0x7ae/0x1060 [ 927.645270] ? selinux_file_mprotect+0x5d0/0x5d0 [ 927.645279] ? lock_downgrade+0x740/0x740 [ 927.645291] ? ioctl_preallocate+0x1c0/0x1c0 [ 927.645303] ? __fget+0x237/0x370 [ 927.645319] ? security_file_ioctl+0x89/0xb0 [ 927.645331] SyS_ioctl+0x8f/0xc0 [ 927.645341] ? do_vfs_ioctl+0x1060/0x1060 [ 927.645353] do_syscall_64+0x1e8/0x640 [ 927.645362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 927.645377] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 927.645385] RIP: 0033:0x45af49 [ 927.645390] RSP: 002b:00007f8e000f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 927.645400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 927.645406] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000006 04:55:42 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 927.645411] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 927.645423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e000f36d4 [ 927.645429] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 927.648539] Mem-Info: [ 927.648568] active_anon:863047 inactive_anon:1745 isolated_anon:0 [ 927.648568] active_file:4203 inactive_file:5785 isolated_file:0 [ 927.648568] unevictable:9533 dirty:147 writeback:0 unstable:0 [ 927.648568] slab_reclaimable:15898 slab_unreclaimable:126845 [ 927.648568] mapped:64777 shmem:1791 pagetables:28105 bounce:0 [ 927.648568] free:463476 free_pcp:298 free_cma:0 [ 927.648587] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 927.648605] Node 1 active_anon:1570080kB inactive_anon:76kB active_file:16796kB inactive_file:23136kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:44016kB dirty:584kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 927.648609] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.648631] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 927.648650] Node 0 DMA32 free:36296kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19136kB pagetables:64628kB bounce:0kB free_pcp:536kB local_pcp:288kB free_cma:0kB [ 927.648673] lowmem_reserve[]: 0 0 0 0 0 [ 927.648692] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 927.648712] lowmem_reserve[]: 0 0 0 0 0 [ 927.648731] Node 1 Normal free:1807124kB min:53508kB low:66884kB high:80260kB active_anon:1570080kB inactive_anon:76kB active_file:16796kB inactive_file:23136kB unevictable:38108kB writepending:536kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20800kB pagetables:47792kB bounce:0kB free_pcp:656kB local_pcp:132kB free_cma:0kB [ 927.648752] lowmem_reserve[]: 0 0 0 0 0 [ 927.648771] Node 0 DMA: 3*4kB (UM) 15*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB [ 927.648850] Node 0 DMA32: 30*4kB (MH) 698*8kB (UMH) 892*16kB (UMEH) 511*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36328kB [ 927.653818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 927.653873] Node 1 Normal: 41*4kB (UME) 0*8kB 1*16kB (E) 181*32kB (UE) 52*64kB (U) 7*128kB (UME) 3*256kB (U) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 437*4096kB (M) = 1807060kB [ 927.653960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.653967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.653974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 927.653981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 927.653985] 16665 total pagecache pages [ 927.653996] 0 pages in swap cache [ 927.654001] Swap cache stats: add 0, delete 0, find 0/0 [ 927.654005] Free swap = 0kB [ 927.654008] Total swap = 0kB 04:55:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x7ff, 0x2221c2) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x8366, 0x3ff, 0x3, 0x1000, 0x8000, 0x4, 0x63a, 0x80000000, r3}, &(0x7f0000000380)=0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r4, 0x9}, 0x8) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000002c0)={0x4, 0x80000000, 0x1, 0xc6, &(0x7f0000000080)=""/198, 0x2d9, &(0x7f0000000000)=""/60, 0x54, &(0x7f0000000180)=""/84}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) uselib(&(0x7f0000000280)='./file0\x00') setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000040)) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000240)) [ 927.654014] 1965979 pages RAM [ 927.654018] 0 pages HighMem/MovableOnly [ 927.654022] 335871 pages reserved [ 927.654025] 0 pages cma reserved [ 927.888831] protocol 88fb is buggy, dev hsr_slave_0 [ 927.904887] protocol 88fb is buggy, dev hsr_slave_1 [ 928.180194] protocol 88fb is buggy, dev hsr_slave_0 [ 928.482371] protocol 88fb is buggy, dev hsr_slave_0 [ 928.532094] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 928.541942] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready [ 928.547960] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.557220] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.566429] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:43 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) read$char_usb(r0, &(0x7f0000000200)=""/231, 0xe7) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffec6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340)}, 0x6003, 0x0, 0xfffff000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) setsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f00000000c0)="fc435a41f2d00e92cf5f073d8a16c09a0ee3f59fb2ffdedbdf044f14d9cf2672c60aa36c2eed", 0x26) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 928.575659] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.584801] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(r4, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[]]) dup2(r5, r4) [ 928.593969] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.594237] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.594406] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.594575] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.594766] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04:55:43 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 928.594843] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.595018] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.595229] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.595534] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.595769] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 928.746719] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 928.858889] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 928.866546] CPU: 0 PID: 15548 Comm: syz-executor.3 Not tainted 4.14.163-syzkaller #0 [ 928.874449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.883810] Call Trace: [ 928.886412] dump_stack+0x142/0x197 [ 928.890073] warn_alloc.cold+0x96/0x1af [ 928.894064] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 928.898913] ? wait_for_completion+0x420/0x420 [ 928.903484] __alloc_pages_slowpath+0x23c6/0x2930 [ 928.908321] ? warn_alloc+0xf0/0xf0 [ 928.911940] ? __might_sleep+0x93/0xb0 [ 928.915814] __alloc_pages_nodemask+0x62c/0x7a0 [ 928.920478] ? rcu_read_lock_sched_held+0x110/0x130 [ 928.925479] ? __alloc_pages_slowpath+0x2930/0x2930 [ 928.930495] alloc_pages_current+0xec/0x1e0 [ 928.934802] kvm_mmu_create+0xdf/0x1e0 [ 928.938677] kvm_arch_vcpu_init+0x29c/0x8e0 [ 928.942985] kvm_vcpu_init+0x272/0x360 [ 928.946858] vmx_create_vcpu+0xfc/0x2aa0 [ 928.950901] ? mutex_trylock+0x1c0/0x1c0 [ 928.954953] ? handle_rdmsr+0x6e0/0x6e0 [ 928.958911] ? wait_for_completion+0x420/0x420 [ 928.963491] kvm_arch_vcpu_create+0x8c/0xc0 [ 928.967808] kvm_vm_ioctl+0x501/0x1600 [ 928.971680] ? __lock_acquire+0x5f7/0x4620 [ 928.975901] ? get_unused_fd_flags+0xd0/0xd0 [ 928.980291] ? kvm_vcpu_release+0xa0/0xa0 [ 928.984421] ? trace_hardirqs_on+0x10/0x10 [ 928.988639] ? trace_hardirqs_on+0x10/0x10 [ 928.992858] ? __might_fault+0x110/0x1d0 [ 928.996912] ? save_trace+0x290/0x290 [ 929.000692] ? __might_fault+0x110/0x1d0 [ 929.004737] ? __fget+0x210/0x370 [ 929.008174] ? find_held_lock+0x35/0x130 [ 929.012219] ? __fget+0x210/0x370 [ 929.015660] ? kvm_vcpu_release+0xa0/0xa0 [ 929.019805] do_vfs_ioctl+0x7ae/0x1060 [ 929.023790] ? selinux_file_mprotect+0x5d0/0x5d0 [ 929.028548] ? lock_downgrade+0x740/0x740 [ 929.032689] ? ioctl_preallocate+0x1c0/0x1c0 [ 929.037092] ? __fget+0x237/0x370 [ 929.040542] ? security_file_ioctl+0x89/0xb0 [ 929.044940] SyS_ioctl+0x8f/0xc0 [ 929.048300] ? do_vfs_ioctl+0x1060/0x1060 [ 929.052435] do_syscall_64+0x1e8/0x640 [ 929.056323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 929.061177] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 929.066358] RIP: 0033:0x45af49 [ 929.069530] RSP: 002b:00007f8e000f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.077231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 929.084501] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000006 [ 929.091768] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 929.099029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e000f36d4 [ 929.106283] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff [ 929.266631] Mem-Info: [ 929.285844] active_anon:859993 inactive_anon:1746 isolated_anon:0 [ 929.285844] active_file:4200 inactive_file:5801 isolated_file:0 [ 929.285844] unevictable:9533 dirty:36 writeback:0 unstable:0 [ 929.285844] slab_reclaimable:15953 slab_unreclaimable:126221 [ 929.285844] mapped:64777 shmem:1791 pagetables:28100 bounce:0 04:55:43 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:43 executing program 1: keyctl$revoke(0x3, 0x0) keyctl$setperm(0x5, 0x0, 0x0) io_setup(0x6, &(0x7f0000000500)=0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)="7ef8545a7c31b2b12b5a72090b090971", 0x10}]) 04:55:43 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 929.285844] free:466931 free_pcp:432 free_cma:0 [ 929.329309] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:8kB inactive_file:16kB unevictable:28kB isolated(anon):0kB isolated(file):0kB mapped:215100kB dirty:8kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 04:55:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x3, 0x2, 0x0, 0xda, 0x2, 0x2, 0xaf}, 0xffffffffffffff7d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x1}) r2 = socket$inet(0x2, 0x3, 0x2) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = creat(0x0, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x2c1) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r6) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000100)) getpriority(0x1, 0xffffffffffffffff) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) 04:55:44 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x19b, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0xffffffa6) r4 = creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84000) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4) bind$netrom(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r6, 0x0, 0x30005, 0x0) 04:55:44 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x10841, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44b204}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="20010009", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRESOCT, @ANYRESHEX], @ANYRES16=r8], @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20800}, 0x2000c000) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) [ 929.395349] Node 1 active_anon:1557864kB inactive_anon:80kB active_file:16792kB inactive_file:23188kB unevictable:38104kB isolated(anon):0kB isolated(file):0kB mapped:44008kB dirty:236kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 04:55:44 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 929.395354] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 04:55:44 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x5, 0x8000}, 0x2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0x7c) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x26, 0x0, 0x80, 0xff, 0x1f, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) getpeername$unix(r6, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40000000000) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:44 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x6, 0x100) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0xfffc, 0x5, 0x8006, 0x0, 0x7f, 0x401, 0xd5, 0x9, r2}, &(0x7f00000002c0)=0x20) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000300)={0x81, 0x6, 0x1000, 0x3ff, 0x8, 0xfffffffe}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x400, 0x828, &(0x7f0000000040)="37b7ce28802862ad84764b74aeab604f76cadda2b2479e308bef23afde44ed5dc868cdb654222dac5a8abcdfe30ea3b2d84efd35e9b44c3bcc8e276f4b16293e8c24b8e8148ded57693ddc505ba4cfed2ede", &(0x7f00000000c0)="5b62bdcf2b8f49d22bb9f117207dff2ab1f9e08699d487e390854f8cfaf3f70f0e3b4f4dc9cf2b2baa12fcca518745f09d3a07122ae735452aed941302c032dcb98eda2d98cdaf293f2863a35022d64e15c7b83e87a72792dc4e75375154b7b2731d071dc5384a48f738ab871b04166c52581fc7925311628045565c9672fb425149eaf53ad3a3b7a6c1f9e0c4d8ea96d000cdd188f9477e757a968afe89f1e34134", 0x52, 0xa2}) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000340)=""/56) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x1a8, 0x0, 0x0, 0xe8, 0x378, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000000380), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x4, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x401, 0x0, 0x0, 'veth0_to_team\x00', 'netdevsim0\x00', {0x80}, {0xff}, 0x67, 0x1, 0x4}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x6, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 'team0\x00', 'caif0\x00', {0x111ec02206d45854}, {}, 0xd001a06474406d3a, 0x6, 0x44}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "64f0", 0x1}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x4a729ee050c26224, 0x20, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfff, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x76, @ipv6=@mcast2, 0x4e24}}}, {{@ip={@broadcast, @local, 0x0, 0xffffff00, 'team_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x89, 0x3, 0x42}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x4, [0x0, 0x12133eec7f6a9da6, 0x3, 0x4, 0x3, 0x5], 0x6, 0x2}}}, @common=@unspec=@mac={{0x30, 'mac\x00'}, {@random="bafb5508771a", 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0xddb4, @loopback, 0x4e20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) syncfs(0xffffffffffffffff) [ 929.395373] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 929.395391] Node 0 DMA32 free:36264kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:8kB inactive_file:16kB unevictable:28kB writepending:8kB present:3129332kB managed:2634332kB mlocked:28kB kernel_stack:19136kB pagetables:64628kB bounce:0kB free_pcp:372kB local_pcp:116kB free_cma:0kB [ 929.395417] lowmem_reserve[]: 0 0 0 0 0 [ 929.395433] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 929.395450] lowmem_reserve[]: 0 0 0 0 0 04:55:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x9b0000, 0x101, 0x1, r0, 0x0, &(0x7f0000000080)={0x0, 0x2, [], @p_u32=&(0x7f0000000040)=0xa8}}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) r4 = creat(0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000440)=0x5) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x7ff, 0xffff8f57, {r3}, {r5}, 0x7, 0x7}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000480), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0xb48d762445e9ff21) r8 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$phonet(r8, &(0x7f00000004c0)={0x23, 0x1, 0x8, 0x4}, 0x10) [ 929.395467] Node 1 Normal free:1820468kB min:53508kB low:66884kB high:80260kB active_anon:1557864kB inactive_anon:80kB active_file:16792kB inactive_file:23188kB unevictable:38104kB writepending:284kB present:3932160kB managed:3870192kB mlocked:38104kB kernel_stack:20832kB pagetables:47772kB bounce:0kB free_pcp:804kB local_pcp:408kB free_cma:0kB [ 929.395487] lowmem_reserve[]: 0 0 0 0 0 [ 929.395502] Node 0 DMA: 3*4kB (UM) 15*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB [ 929.395781] Node 0 DMA32: 32*4kB (UMEH) 692*8kB (UMH) 896*16kB (UMEH) 510*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36320kB [ 929.395833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 04:55:44 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x2, @capture={0x1000, 0x3, {0x4, 0x47}, 0x10001, 0x8983}}) [ 929.395874] Node 1 Normal: 231*4kB (UME) 152*8kB (UM) 83*16kB (UME) 212*32kB (UME) 96*64kB (UM) 30*128kB (UME) 6*256kB (UM) 7*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 437*4096kB (M) = 1820428kB [ 929.395958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.395964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.395970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 929.395975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 929.395978] 16682 total pagecache pages [ 929.395988] 0 pages in swap cache [ 929.395993] Swap cache stats: add 0, delete 0, find 0/0 [ 929.395995] Free swap = 0kB 04:55:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x5}) 04:55:44 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 929.395998] Total swap = 0kB [ 929.396004] 1965979 pages RAM [ 929.396007] 0 pages HighMem/MovableOnly [ 929.396009] 335871 pages reserved [ 929.396012] 0 pages cma reserved 04:55:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5584, 0x357f02) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x12000, 0x44) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x100, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:45 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x19b, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0xffffffa6) r4 = creat(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x84000) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4) bind$netrom(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r6, 0x0, 0x30005, 0x0) 04:55:45 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f00000000c0)=0xfffffffffffffff7) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) flistxattr(r5, &(0x7f0000000100)=""/79, 0x4f) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 04:55:45 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:45 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="590f1b56498b50c2137d1c5fead494e3db53717b1752291da77ebaa4c131fc618689815d26c63361fc3dd60afa4b654564c295f70f77e7430520eb81398c0c15ac8f366b04b8061e7acc7b6f28575541398fc4a1822fb44a8891f411a59dbb4882688193d6c44026558cda6f4d227c96f1665268e910f82f4ee66cf52de69887b0d8453d4236306b09a0ba9f1a") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:45 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:45 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x400000) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x1c) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x80400, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r4, 0x42972f0d5d4b6c47}) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x9) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={r4, 0xb79fd5ad377957d7}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x202000, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00e2ff2ad9c8df3670c8fa357cf600e1fad27b5b4fc5825b155d8d8fcee7446abf9c81cee78068cea300"/62], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xde}, 0x8) [ 931.200175] net_ratelimit: 8 callbacks suppressed [ 931.200180] protocol 88fb is buggy, dev hsr_slave_0 [ 931.200231] protocol 88fb is buggy, dev hsr_slave_1 [ 931.200311] protocol 88fb is buggy, dev hsr_slave_0 [ 931.200347] protocol 88fb is buggy, dev hsr_slave_1 04:55:45 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7cea, 0x100) bind$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:46 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x7fffffff, @rand_addr="0b10cfbed68d0dc4688042fbcabb9bf3", 0xa}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, 0x121, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='dummy0\x00', 0x80000001, 0x4, 0xf001}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) write$P9_RLOPEN(r6, &(0x7f0000000240)={0x18, 0xd, 0x1, {{0x1, 0x0, 0x6}, 0x5}}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0) r7 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4) recvfrom$inet6(r7, &(0x7f0000000340)=""/4096, 0x1000, 0x100, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @empty, 0x101}, 0x1c) 04:55:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 2: prctl$PR_SET_TSC(0x1a, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000000005, 0xa8bd03) r1 = gettid() ptrace$getregs(0xe, r1, 0x40, &(0x7f0000000080)=""/73) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 932.000105] protocol 88fb is buggy, dev hsr_slave_0 [ 932.000148] protocol 88fb is buggy, dev hsr_slave_1 04:55:46 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:46 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x664806643cc11d4b, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) 04:55:47 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x256) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/204) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:47 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x10400) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0x6}) socket$inet_sctp(0x2, 0x1, 0x84) 04:55:47 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:47 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:47 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = syz_open_pts(r3, 0x400) ioctl$TCXONC(r4, 0x540a, 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x9cdf) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0xb849}, r6, 0x1, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 04:55:47 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000002c0)={0x9c0000, 0x80000000, 0x8000000, r2, 0x0, &(0x7f0000000080)={0x99096f, 0xfffff801, [], @p_u32=&(0x7f0000000300)=0xffffffff}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r4 = creat(0x0, 0x0) sysinfo(&(0x7f0000000400)=""/68) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)={0xfffffffc, 0x4, 0x4, 0x10404, 0x2, {}, {0x1, 0x2, 0x1, 0x43, 0x6, 0xe6, "000cbb3a"}, 0x8000, 0x0, @planes=&(0x7f0000000340)={0x5, 0x1, @mem_offset=0xda85, 0x1}, 0xf6}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000180)=""/220, &(0x7f0000000280)=0xdc) 04:55:47 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) [ 932.640102] protocol 88fb is buggy, dev hsr_slave_0 04:55:47 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 932.640121] protocol 88fb is buggy, dev hsr_slave_0 [ 932.640151] protocol 88fb is buggy, dev hsr_slave_1 [ 932.640162] protocol 88fb is buggy, dev hsr_slave_1 04:55:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:47 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:55:48 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000003c0)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb77bd86713f8600}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xcc, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc20c}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x8002) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r7 = add_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="72957e6d98b390ca42b19d4f4006cdbf2753dfb24cc2d57a1fb1a62d0c0d8149a27f", 0x22, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000400)='encrypted\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r7}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r6, 0x0, 0x30005, 0x0) 04:55:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x14, &(0x7f0000000640)={r5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x0, 0x3, 0x0, 0x709, 0x3a, 0xb026, 0x7, 0x7, r5}, &(0x7f0000000500)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={r6, @in6={{0xa, 0x4e23, 0x6, @local, 0x10000}}, 0x3, 0x6}, 0x90) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, @can={0x1d, r2}, @sco={0x1f, {0x5, 0x8, 0x0, 0x2, 0x40, 0x1}}, @xdp={0x2c, 0x4, 0x0, 0xb}, 0x26, 0x0, 0x0, 0x0, 0xb427, &(0x7f0000000200)='macvlan1\x00', 0x81, 0x80000001, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) r8 = socket$inet(0x2, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) r10 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000400)) waitid(0x1, r9, &(0x7f0000000700), 0x40000000, &(0x7f0000000780)) setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000080)) r11 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, &(0x7f0000000480)=0x1, 0x4) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000040)) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r12, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002280)={0x14, r13, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x804020}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0xcc, r13, 0x1300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x80) 04:55:48 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:48 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:55:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:48 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000000100)="6e5ad997263733e9901652e5d54ad58ad37e3d18fb6889f9192447350cc401f823b0aac310b84fbc62c22983187f29702753eef6f7adbc9cf6484efffb5651379f50ff369879401bd0116d7b66713c1c6c793491759c5aaba914aec0f908983ac1cd67aebf83d517da8a") setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r6], 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 04:55:48 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:48 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:48 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:48 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x2) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:48 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:48 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x5, 0x9faf7e0272eb0f2a, 0x6) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x78, 0x1, 0x1, 0x800, 0x70bd29, 0x25dfdbff, {0xc, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x64, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x277, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x88}}]}]}, 0x78}}, 0x44800) preadv(r1, 0x0, 0x0, 0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x1}]}, 0x20}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, r4}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x209, 0x401, 0x6, r4}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, 0x63, 0x4053f2f6, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) 04:55:49 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:49 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:49 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:49 executing program 2: r0 = creat(0x0, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304}, "e69692c0715c2992", "aee41fcd18d147e5f3cae1280b072da6d65bc59e4039ab6d75165b94ed262bb3", "2a44c239", "7d391d4dd1cb675d"}, 0x38) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000005c0)=0x66b2) r2 = accept4$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14, 0x80800) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/912], 0x390) r3 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x4e41, 0x800) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="05000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00 \x00'], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000500)={r7, 0x7, 0x1, [0x8]}, &(0x7f0000000540)=0xa) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000580)={r8, 0x9, 0x5, [0x8, 0xffff, 0x1, 0x1, 0x2]}, 0x12) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) 04:55:49 executing program 0 (fault-call:4 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 934.497618] FAULT_INJECTION: forcing a failure. [ 934.497618] name failslab, interval 1, probability 0, space 0, times 0 [ 934.497630] CPU: 1 PID: 15820 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 934.497636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.497640] Call Trace: [ 934.497661] dump_stack+0x142/0x197 04:55:49 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 934.497677] should_fail.cold+0x10f/0x159 [ 934.497693] should_failslab+0xdb/0x130 [ 934.497703] __kmalloc+0x2f0/0x7a0 [ 934.497715] ? __lock_acquire+0x5f7/0x4620 [ 934.497724] ? lock_downgrade+0x740/0x740 [ 934.497801] ? drm_ioctl+0x3d1/0x940 [ 934.497813] drm_ioctl+0x3d1/0x940 [ 934.497845] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 934.497860] ? drm_getstats+0x30/0x30 [ 934.497874] ? __might_sleep+0x93/0xb0 [ 934.497883] ? __fget+0x210/0x370 [ 934.497897] ? drm_getstats+0x30/0x30 [ 934.497907] do_vfs_ioctl+0x7ae/0x1060 [ 934.497920] ? selinux_file_mprotect+0x5d0/0x5d0 [ 934.497929] ? lock_downgrade+0x740/0x740 [ 934.497939] ? ioctl_preallocate+0x1c0/0x1c0 [ 934.497951] ? __fget+0x237/0x370 [ 934.497968] ? security_file_ioctl+0x89/0xb0 [ 934.497981] SyS_ioctl+0x8f/0xc0 [ 934.497990] ? do_vfs_ioctl+0x1060/0x1060 [ 934.498002] do_syscall_64+0x1e8/0x640 [ 934.498013] ? trace_hardirqs_off_thunk+0x1a/0x1c 04:55:49 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 934.498033] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 934.498044] RIP: 0033:0x45af49 [ 934.498051] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.498065] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49 [ 934.498072] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003 [ 934.498080] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 934.498088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 04:55:49 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x1) bind$netrom(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'veth0\x00', {}, 0x6}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) [ 934.498096] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006 [ 934.589673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 934.596943] audit: type=1400 audit(1578632149.199:104): avc: denied { setopt } for pid=15824 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 934.655892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:55:49 executing program 0 (fault-call:4 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:49 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'batadv0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="37000000040000000e"]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 04:55:49 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 934.841395] FAULT_INJECTION: forcing a failure. [ 934.841395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:55:49 executing program 0 (fault-call:4 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 934.841405] CPU: 1 PID: 15839 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 04:55:49 executing program 0 (fault-call:4 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 934.841411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.841415] Call Trace: [ 934.841430] dump_stack+0x142/0x197 [ 934.841446] should_fail.cold+0x10f/0x159 [ 934.841468] __alloc_pages_nodemask+0x1d6/0x7a0 [ 934.841476] ? fs_reclaim_acquire+0x20/0x20 [ 934.841490] ? __alloc_pages_slowpath+0x2930/0x2930 [ 934.841508] cache_grow_begin+0x80/0x400 [ 934.841516] __kmalloc+0x6bf/0x7a0 [ 934.841523] ? __lock_acquire+0x5f7/0x4620 [ 934.841531] ? drm_ioctl+0x3d1/0x940 [ 934.841538] drm_ioctl+0x3d1/0x940 [ 934.841543] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 934.841550] ? drm_getstats+0x30/0x30 04:55:49 executing program 0 (fault-call:4 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 934.841558] ? __might_sleep+0x93/0xb0 [ 934.841564] ? __fget+0x210/0x370 [ 934.841572] ? drm_getstats+0x30/0x30 [ 934.841578] do_vfs_ioctl+0x7ae/0x1060 [ 934.841585] ? selinux_file_mprotect+0x5d0/0x5d0 [ 934.841590] ? lock_downgrade+0x740/0x740 [ 934.841597] ? ioctl_preallocate+0x1c0/0x1c0 [ 934.841603] ? __fget+0x237/0x370 [ 934.841613] ? security_file_ioctl+0x89/0xb0 [ 934.841620] SyS_ioctl+0x8f/0xc0 [ 934.841625] ? do_vfs_ioctl+0x1060/0x1060 [ 934.841633] do_syscall_64+0x1e8/0x640 04:55:49 executing program 1: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 934.841639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 934.841654] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 934.841661] RIP: 0033:0x45af49 [ 934.841667] RSP: 002b:00007fe80f23dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.841678] RAX: ffffffffffffffda RBX: 00007fe80f23dc90 RCX: 000000000045af49 [ 934.841684] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003 [ 934.841689] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 934.841695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f23e6d4 [ 934.841700] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006 [ 934.911261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 935.004420] FAULT_INJECTION: forcing a failure. [ 935.004420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.004432] CPU: 0 PID: 15855 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 935.004438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.004441] Call Trace: [ 935.004456] dump_stack+0x142/0x197 [ 935.004471] should_fail.cold+0x10f/0x159 [ 935.004486] __alloc_pages_nodemask+0x1d6/0x7a0 [ 935.004496] ? ____cache_alloc_node+0x162/0x1d0 [ 935.004509] ? __alloc_pages_slowpath+0x2930/0x2930 [ 935.004517] ? ____cache_alloc_node+0x162/0x1d0 [ 935.004535] cache_grow_begin+0x80/0x400 [ 935.004548] ____cache_alloc_node+0x17c/0x1d0 [ 935.004560] __kmalloc+0x21a/0x7a0 [ 935.004570] ? __lock_acquire+0x5f7/0x4620 [ 935.004582] ? drm_ioctl+0x3d1/0x940 [ 935.004593] drm_ioctl+0x3d1/0x940 [ 935.004602] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 935.004628] ? drm_getstats+0x30/0x30 [ 935.004646] ? __might_sleep+0x93/0xb0 [ 935.004656] ? __fget+0x210/0x370 [ 935.004673] ? drm_getstats+0x30/0x30 [ 935.004685] do_vfs_ioctl+0x7ae/0x1060 [ 935.004699] ? selinux_file_mprotect+0x5d0/0x5d0 [ 935.004709] ? lock_downgrade+0x740/0x740 [ 935.004720] ? ioctl_preallocate+0x1c0/0x1c0 [ 935.004732] ? __fget+0x237/0x370 [ 935.004749] ? security_file_ioctl+0x89/0xb0 [ 935.004762] SyS_ioctl+0x8f/0xc0 [ 935.004772] ? do_vfs_ioctl+0x1060/0x1060 [ 935.004784] do_syscall_64+0x1e8/0x640 [ 935.004794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 935.004809] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 935.004817] RIP: 0033:0x45af49 [ 935.004823] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.004833] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49 [ 935.004839] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003 [ 935.004845] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 935.004850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 935.004856] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006 [ 935.102419] FAULT_INJECTION: forcing a failure. [ 935.102419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.102430] CPU: 0 PID: 15863 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 935.102436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.102440] Call Trace: [ 935.102455] dump_stack+0x142/0x197 [ 935.102469] should_fail.cold+0x10f/0x159 [ 935.102479] ? __might_sleep+0x93/0xb0 [ 935.102501] __alloc_pages_nodemask+0x1d6/0x7a0 [ 935.102515] ? __alloc_pages_slowpath+0x2930/0x2930 [ 935.102526] ? ____cache_alloc_node+0x1be/0x1d0 [ 935.102537] ? cache_grow_begin+0x335/0x400 [ 935.102551] cache_grow_begin+0x80/0x400 [ 935.102562] ? __cpuset_node_allowed+0xff/0x450 [ 935.102573] fallback_alloc+0x1fd/0x2c0 [ 935.102586] ____cache_alloc_node+0x1be/0x1d0 [ 935.102599] __kmalloc+0x21a/0x7a0 [ 935.102608] ? __lock_acquire+0x5f7/0x4620 [ 935.102622] ? drm_ioctl+0x3d1/0x940 [ 935.102633] drm_ioctl+0x3d1/0x940 [ 935.102642] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 935.102655] ? drm_getstats+0x30/0x30 [ 935.102669] ? __might_sleep+0x93/0xb0 [ 935.102679] ? __fget+0x210/0x370 [ 935.102694] ? drm_getstats+0x30/0x30 [ 935.102710] do_vfs_ioctl+0x7ae/0x1060 [ 935.102723] ? selinux_file_mprotect+0x5d0/0x5d0 [ 935.102732] ? lock_downgrade+0x740/0x740 [ 935.102744] ? ioctl_preallocate+0x1c0/0x1c0 [ 935.102756] ? __fget+0x237/0x370 [ 935.102775] ? security_file_ioctl+0x89/0xb0 [ 935.102790] SyS_ioctl+0x8f/0xc0 [ 935.102801] ? do_vfs_ioctl+0x1060/0x1060 [ 935.102816] do_syscall_64+0x1e8/0x640 [ 935.102828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 935.102849] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 935.102857] RIP: 0033:0x45af49 [ 935.102862] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.102873] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49 [ 935.102879] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003 [ 935.102886] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 935.102892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 935.102897] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006 [ 935.151311] FAULT_INJECTION: forcing a failure. [ 935.151311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.151524] CPU: 0 PID: 15868 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 935.151531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.151535] Call Trace: [ 935.151550] dump_stack+0x142/0x197 [ 935.151566] should_fail.cold+0x10f/0x159 [ 935.151577] ? __might_sleep+0x93/0xb0 [ 935.151592] __alloc_pages_nodemask+0x1d6/0x7a0 [ 935.151605] ? __alloc_pages_slowpath+0x2930/0x2930 [ 935.151624] alloc_pages_vma+0xc9/0x4c0 [ 935.151634] wp_page_copy+0xa5f/0x13d0 [ 935.151649] ? follow_pfn+0x220/0x220 [ 935.151662] ? do_raw_spin_unlock+0x16b/0x260 [ 935.151672] do_wp_page+0x24b/0x1250 [ 935.151684] ? finish_mkwrite_fault+0x620/0x620 [ 935.151699] __handle_mm_fault+0x1cc3/0x33d0 [ 935.151712] ? copy_page_range+0x1de0/0x1de0 [ 935.151722] ? find_held_lock+0x35/0x130 [ 935.151741] ? handle_mm_fault+0x1b6/0x7c0 [ 935.151765] handle_mm_fault+0x293/0x7c0 [ 935.151778] __do_page_fault+0x4c1/0xb80 [ 935.151794] ? vmalloc_fault+0xe30/0xe30 [ 935.151809] do_page_fault+0x71/0x511 [ 935.151885] page_fault+0x25/0x50 [ 935.151899] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 935.151905] RSP: 0018:ffff8881af407c10 EFLAGS: 00010202 [ 935.151914] RAX: 0000000000000007 RBX: 0000000000003fff RCX: 0000000000002fff [ 935.151920] RDX: 0000000000003fff RSI: ffff8881bb4119c0 RDI: 0000000020001000 [ 935.151926] RBP: ffff8881af407c40 R08: ffffed1037682938 R09: 0000000000000800 [ 935.151932] R10: ffffed1037682937 R11: 0000000000000006 R12: 0000000020000000 [ 935.151938] R13: ffff8881bb4109c0 R14: 00007ffffffff000 R15: 0000000020003fff [ 935.151960] ? _copy_to_user+0xb1/0xd0 [ 935.151973] drm_ioctl+0x4b8/0x940 [ 935.151982] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 935.151993] ? drm_getstats+0x30/0x30 [ 935.152006] ? __might_sleep+0x93/0xb0 [ 935.152015] ? __fget+0x210/0x370 [ 935.152029] ? drm_getstats+0x30/0x30 [ 935.152042] do_vfs_ioctl+0x7ae/0x1060 [ 935.152055] ? selinux_file_mprotect+0x5d0/0x5d0 [ 935.152065] ? lock_downgrade+0x740/0x740 [ 935.152077] ? ioctl_preallocate+0x1c0/0x1c0 [ 935.152089] ? __fget+0x237/0x370 [ 935.152105] ? security_file_ioctl+0x89/0xb0 [ 935.152118] SyS_ioctl+0x8f/0xc0 [ 935.152128] ? do_vfs_ioctl+0x1060/0x1060 [ 935.152141] do_syscall_64+0x1e8/0x640 [ 935.152151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 935.152166] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 935.152173] RIP: 0033:0x45af49 [ 935.152178] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.152188] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49 [ 935.152193] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003 [ 935.152199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 935.152204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 935.152209] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006 [ 935.257228] FAULT_INJECTION: forcing a failure. [ 935.257228] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.277228] CPU: 0 PID: 15870 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 935.289461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.289465] Call Trace: [ 935.289489] dump_stack+0x142/0x197 [ 935.289505] should_fail.cold+0x10f/0x159 [ 935.303248] ? __might_sleep+0x93/0xb0 [ 935.303264] __alloc_pages_nodemask+0x1d6/0x7a0 [ 935.303278] ? __alloc_pages_slowpath+0x2930/0x2930 [ 935.303287] ? wp_page_copy+0xc83/0x13d0 [ 935.303308] alloc_pages_vma+0xc9/0x4c0 [ 935.303319] wp_page_copy+0xa5f/0x13d0 [ 935.303333] ? follow_pfn+0x220/0x220 [ 935.303347] ? do_raw_spin_unlock+0x16b/0x260 [ 936.060324] do_wp_page+0x24b/0x1250 [ 936.060338] ? finish_mkwrite_fault+0x620/0x620 04:55:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0xaef, 0x4, 0x4, 0x24004, 0x1, {}, {0x5, 0xc, 0x1, 0xe, 0xff, 0x0, "bf60e50d"}, 0x3, 0x1, @userptr=0x5, 0x6, 0x0, r1}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x1, 0x3e}) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) 04:55:50 executing program 0 (fault-call:4 fault-nth:6): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:50 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r6}, 0x8c6e, 0x1, 0x3}) 04:55:50 executing program 0 (fault-call:4 fault-nth:7): r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 936.068737] __handle_mm_fault+0x1cc3/0x33d0 [ 936.068751] ? copy_page_range+0x1de0/0x1de0 [ 936.068763] ? find_held_lock+0x35/0x130 [ 936.068773] ? handle_mm_fault+0x1b6/0x7c0 [ 936.068793] handle_mm_fault+0x293/0x7c0 [ 936.068806] __do_page_fault+0x4c1/0xb80 04:55:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffd, 0x600003) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sync_file_range(r1, 0x2, 0x7fff, 0x3) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000)) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) [ 936.068818] ? vmalloc_fault+0xe30/0xe30 [ 936.068831] do_page_fault+0x71/0x511 [ 936.068851] page_fault+0x25/0x50 [ 936.068863] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 936.068868] RSP: 0018:ffff8881af6c7c10 EFLAGS: 00010202 [ 936.068878] RAX: 0000000000000007 RBX: 0000000000003fff RCX: 0000000000001fff [ 936.068883] RDX: 0000000000003fff RSI: ffff8881af402a00 RDI: 0000000020002000 04:55:50 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) [ 936.068889] RBP: ffff8881af6c7c40 R08: ffffed1035e80940 R09: 0000000000000800 [ 936.068895] R10: ffffed1035e8093f R11: 0000000000000006 R12: 0000000020000000 [ 936.068900] R13: ffff8881af400a00 R14: 00007ffffffff000 R15: 0000000020003fff [ 936.068922] ? _copy_to_user+0xb1/0xd0 [ 936.068934] drm_ioctl+0x4b8/0x940 [ 936.068944] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 936.068956] ? drm_getstats+0x30/0x30 [ 936.068970] ? __might_sleep+0x93/0xb0 [ 936.068980] ? __fget+0x210/0x370 [ 936.068995] ? drm_getstats+0x30/0x30 [ 936.069006] do_vfs_ioctl+0x7ae/0x1060 [ 936.069019] ? selinux_file_mprotect+0x5d0/0x5d0 [ 936.069028] ? lock_downgrade+0x740/0x740 [ 936.069040] ? ioctl_preallocate+0x1c0/0x1c0 [ 936.069052] ? __fget+0x237/0x370 [ 936.069068] ? security_file_ioctl+0x89/0xb0 [ 936.069080] SyS_ioctl+0x8f/0xc0 [ 936.069090] ? do_vfs_ioctl+0x1060/0x1060 [ 936.069102] do_syscall_64+0x1e8/0x640 [ 936.069111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 936.069125] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 936.069132] RIP: 0033:0x45af49 [ 936.069136] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.069146] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49 [ 936.069152] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003 [ 936.069157] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 936.069162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 936.069168] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006 [ 936.204581] FAULT_INJECTION: forcing a failure. [ 936.204581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 936.204593] CPU: 1 PID: 15881 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0 [ 936.204599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.204603] Call Trace: [ 936.204630] dump_stack+0x142/0x197 [ 936.204648] should_fail.cold+0x10f/0x159 [ 936.204662] ? __might_sleep+0x93/0xb0 [ 936.204680] __alloc_pages_nodemask+0x1d6/0x7a0 [ 936.204697] ? __alloc_pages_slowpath+0x2930/0x2930 [ 936.204709] ? wp_page_copy+0xc83/0x13d0 [ 936.204730] alloc_pages_vma+0xc9/0x4c0 [ 936.204744] wp_page_copy+0xa5f/0x13d0 [ 936.204758] ? follow_pfn+0x220/0x220 [ 936.204769] ? do_raw_spin_unlock+0x16b/0x260 [ 936.204782] do_wp_page+0x24b/0x1250 [ 936.204797] ? finish_mkwrite_fault+0x620/0x620 [ 936.204811] __handle_mm_fault+0x1cc3/0x33d0 [ 936.204825] ? copy_page_range+0x1de0/0x1de0 [ 936.204836] ? find_held_lock+0x35/0x130 [ 936.204846] ? handle_mm_fault+0x1b6/0x7c0 [ 936.204868] handle_mm_fault+0x293/0x7c0 [ 936.204881] __do_page_fault+0x4c1/0xb80 [ 936.204896] ? vmalloc_fault+0xe30/0xe30 [ 936.204913] do_page_fault+0x71/0x511 [ 936.204926] page_fault+0x25/0x50 [ 936.204950] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 936.204956] RSP: 0018:ffff8881b12afc10 EFLAGS: 00010202 [ 936.204969] RAX: 0000000000000007 RBX: 0000000000003fff RCX: 0000000000000fff [ 936.204977] RDX: 0000000000003fff RSI: ffff88820185ba40 RDI: 0000000020003000 [ 936.204984] RBP: ffff8881b12afc40 R08: ffffed104030b948 R09: 0000000000000800 [ 936.204992] R10: ffffed104030b947 R11: 0000000000000006 R12: 0000000020000000 [ 936.204999] R13: ffff888201858a40 R14: 00007ffffffff000 R15: 0000000020003fff [ 936.205028] ? _copy_to_user+0xb1/0xd0 [ 936.205043] drm_ioctl+0x4b8/0x940 [ 936.205056] ? drm_mode_cursor2_ioctl+0x30/0x30 [ 936.205071] ? drm_getstats+0x30/0x30 [ 936.205086] ? __might_sleep+0x93/0xb0 [ 936.205096] ? __fget+0x210/0x370 [ 936.205116] ? drm_getstats+0x30/0x30 [ 936.205128] do_vfs_ioctl+0x7ae/0x1060 [ 936.205141] ? selinux_file_mprotect+0x5d0/0x5d0 [ 936.205152] ? lock_downgrade+0x740/0x740 [ 936.205164] ? ioctl_preallocate+0x1c0/0x1c0 [ 936.205176] ? __fget+0x237/0x370 [ 936.205193] ? security_file_ioctl+0x89/0xb0 [ 936.205212] SyS_ioctl+0x8f/0xc0 [ 936.205224] ? do_vfs_ioctl+0x1060/0x1060 [ 936.205241] do_syscall_64+0x1e8/0x640 [ 936.205253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 936.205269] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 936.205276] RIP: 0033:0x45af49 [ 936.205280] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.205292] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49 [ 936.205298] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003 [ 936.205304] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 936.205311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4 [ 936.205317] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006 [ 936.801825] net_ratelimit: 16 callbacks suppressed [ 936.801829] protocol 88fb is buggy, dev hsr_slave_0 [ 936.801861] protocol 88fb is buggy, dev hsr_slave_1 [ 936.812107] protocol 88fb is buggy, dev hsr_slave_0 [ 936.826349] protocol 88fb is buggy, dev hsr_slave_1 04:55:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x101, 0x1, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000, 0xffffffff}], 0x0, &(0x7f0000001180)={[{@largeio='largeio'}, {@logbsize={'logbsize', 0x3d, [0x33, 0x70, 0x76, 0x38, 0x38, 0x33, 0x35]}}, {@dax='dax'}, {@lazytime='lazytime'}, {@nouuid='nouuid'}, {@usrquota='usrquota'}, {@noattr2='noattr2'}], [{@euid_gt={'euid>', r1}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}]}) 04:55:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffdfffffffe, 0x80002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xe8, r3, 0x5a4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x48b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9afe}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc4000}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:51 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:51 executing program 1: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x25f4f78af31a048c, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x5) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:51 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) openat$cgroup_ro(r2, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x4000) ioctl(r3, 0x8, &(0x7f0000000000)="774a62e6e389c6862ea12af8caf4729f20e0979cf0d0f7b90bb5109f52d7a465568089e1005eca210c8f5e2985aefa5b1d18e4f1932835450516cedd23d80091da11d6fe2696293497ec80a7568a0c45c755df3e0766f8f5") 04:55:51 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x3}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x94, 0x400000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:51 executing program 3: socket$inet(0x10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) dup3(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) readahead(r4, 0x3, 0xf4cf) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800e412}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x10) 04:55:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) fanotify_mark(r3, 0x86, 0x40001001, r4, &(0x7f0000000000)='./file0\x00') r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x14, &(0x7f0000000640)={r6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x800}, 0x8) 04:55:51 executing program 1: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:51 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:52 executing program 2: r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0xde, 0x1000, 0x7, 0x0, 0x0, [{{}, 0x90b}, {{r1}, 0x1f}, {{r0}, 0x9}, {{r2}, 0x9}, {{r3}, 0x4}, {{r0}, 0x7}, {{}, 0x7}]}) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10600) bind$rose(r4, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x74d9607d6fa5a3d2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) 04:55:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x40, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0914, 0x2, [], @value64=0x9}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80108180}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x32f, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20040804) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 04:55:52 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 937.441179] protocol 88fb is buggy, dev hsr_slave_0 04:55:52 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 937.441217] protocol 88fb is buggy, dev hsr_slave_1 [ 937.441291] protocol 88fb is buggy, dev hsr_slave_0 [ 937.441327] protocol 88fb is buggy, dev hsr_slave_1 04:55:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x234040) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2000, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1230000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf25030000005d4af08fd8adfd3f070000000c400300d10faa4443800d977c484d0000000000000000e6eeabec06ec8f288ca8088002000700000008000100010000000c0004000700000000000000080002007f00cf00140005000800200565"], 0x64}, 0x1, 0x0, 0x0, 0x2002490}, 0x24008045) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) 04:55:52 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x748db1e8636a2b00, 0x0) recvfrom$llc(r5, &(0x7f0000000100)=""/1, 0x1, 0x10100, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000140)) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x191083, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:55:52 executing program 3: socket$inet(0x10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) syz_open_procfs(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) dup3(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) readahead(r4, 0x3, 0xf4cf) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800e412}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x10) 04:55:52 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:52 executing program 4 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000005c0)=""/78, 0x4e}], 0x7, &(0x7f00000006c0)=""/104, 0x68}, 0x8b3d1a217424c913) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), 0x2) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:userio_device_t:s0\x00', 0x371, 0x2) 04:55:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x0, 0x8}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) socket$vsock_dgram(0x28, 0x2, 0x0) [ 938.250107] protocol 88fb is buggy, dev hsr_slave_0 [ 938.250144] protocol 88fb is buggy, dev hsr_slave_1 04:55:53 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'macvlan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="270000008399879efb79d1bca21a63b97b", @ANYRES16=r3, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x325871355089ae76}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) recvmmsg(r4, &(0x7f0000000980)=[{{&(0x7f0000000240)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/255, 0xff}], 0x3, &(0x7f00000006c0)=""/144, 0x90}, 0x401}, {{&(0x7f0000000780)=@ax25={{0x3, @netrom}, [@netrom, @remote, @bcast, @bcast, @null, @remote, @default]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000800)=""/134, 0x86}, {&(0x7f00000008c0)=""/180, 0xb4}], 0x2}, 0x4}], 0x2, 0x0, &(0x7f0000000a00)) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x8) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000000)) ioctl(r1, 0x1, &(0x7f0000000380)="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") 04:55:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2000000000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) 04:55:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x800000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x4, 0xfffffffffffffeff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCSIG(r4, 0x40045436, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) personality(0xbc00011) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6) [ 938.524297] FAULT_INJECTION: forcing a failure. [ 938.524297] name failslab, interval 1, probability 0, space 0, times 0 [ 938.524384] CPU: 0 PID: 15992 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0 [ 938.524390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.524394] Call Trace: [ 938.524410] dump_stack+0x142/0x197 [ 938.524425] should_fail.cold+0x10f/0x159 [ 938.524440] should_failslab+0xdb/0x130 [ 938.524450] __kmalloc+0x71/0x7a0 [ 938.524529] ? bit_cursor+0x9d6/0x1830 [ 938.524541] bit_cursor+0x9d6/0x1830 [ 938.524556] ? bit_clear+0x4a0/0x4a0 [ 938.524590] ? fb_get_color_depth.part.0+0xc0/0x1c0 [ 938.524602] ? fb_get_color_depth+0x5f/0x70 [ 938.524613] ? get_color+0x1bf/0x3b0 [ 938.524631] fbcon_cursor+0x4e3/0x6f0 [ 938.524640] ? bit_clear+0x4a0/0x4a0 [ 938.524660] set_cursor+0x1bd/0x240 [ 938.524670] redraw_screen+0x596/0x7c0 [ 938.524683] ? con_flush_chars+0x90/0x90 [ 938.524702] ? fbcon_set_palette+0x203/0x5b0 [ 938.524717] fbcon_modechanged+0x59e/0x880 [ 938.524734] fbcon_set_all_vcs+0x35f/0x420 [ 938.524750] fbcon_event_notify+0x75/0x17af [ 938.524764] ? lock_acquire+0x16f/0x430 [ 938.524806] notifier_call_chain+0x111/0x1b0 [ 938.524823] blocking_notifier_call_chain+0x80/0xa0 [ 938.524836] fb_notifier_call_chain+0x25/0x30 [ 938.524846] fb_set_var+0xb09/0xcf0 [ 938.524859] ? fb_set_suspend+0x110/0x110 [ 938.524869] ? lock_acquire+0x16f/0x430 [ 938.524878] ? lock_fb_info+0x1f/0x80 [ 938.524891] ? lock_fb_info+0x1f/0x80 [ 938.524904] ? __mutex_lock+0x36a/0x1470 [ 938.524915] ? trace_hardirqs_on+0x10/0x10 [ 938.524931] ? mutex_trylock+0x1c0/0x1c0 [ 938.524954] ? mutex_lock_nested+0x16/0x20 [ 938.524963] ? mutex_lock_nested+0x16/0x20 [ 938.524974] do_fb_ioctl+0x3cc/0x940 [ 938.524985] ? fb_read+0x520/0x520 [ 938.524999] ? avc_has_extended_perms+0x8ec/0xe40 [ 938.525009] ? get_pid_task+0x98/0x140 [ 938.525021] ? avc_ss_reset+0x110/0x110 [ 938.525034] ? __lock_acquire+0x5f7/0x4620 [ 938.525046] ? lock_downgrade+0x740/0x740 [ 938.525071] ? __might_sleep+0x93/0xb0 [ 938.525081] ? __fget+0x210/0x370 [ 938.525093] fb_ioctl+0xe6/0x130 [ 938.525101] ? do_fb_ioctl+0x940/0x940 [ 938.525110] do_vfs_ioctl+0x7ae/0x1060 [ 938.525120] ? selinux_file_mprotect+0x5d0/0x5d0 [ 938.525128] ? lock_downgrade+0x740/0x740 [ 938.525137] ? ioctl_preallocate+0x1c0/0x1c0 [ 938.525149] ? __fget+0x237/0x370 [ 938.525164] ? security_file_ioctl+0x89/0xb0 [ 938.525176] SyS_ioctl+0x8f/0xc0 [ 938.525185] ? do_vfs_ioctl+0x1060/0x1060 [ 938.525198] do_syscall_64+0x1e8/0x640 [ 938.525206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 938.525220] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 938.525228] RIP: 0033:0x45af49 [ 938.525235] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 938.525248] RAX: ffffffffffffffda RBX: 00007fe609685c90 RCX: 000000000045af49 [ 938.525255] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004 [ 938.525262] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 938.525270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4 [ 938.525277] R13: 00000000004c3903 R14: 00000000004d9f18 R15: 0000000000000005 04:55:53 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)="ba882d2f46fc2e91ca048d7ffc68590eb6e6f1b0c30196278f6be2eb462163345b9a9d07462c6f3cf65ef13a7bf4886103c2d6c9a8d99c57a95f52a499c21e5b2120ad53e0b30b991f8f9ea91eaa8083e37409dc75935479befb0c0381e62cdfa5519d19dd48385f76f90483f7a4575d281533c5eb8491dcb28cc5b332ce1ba1b8f4d926747a67955b2605ab50ffd321bce1962ed8107396dc01f8a8f3c86283c2b3c44c33997b8a662dc6263ca1ca4507d89c924a56a452f814fbe2278a45638bc8392ed273aff4bc44220da1342f89a4d77cca44ef986a27cc2bcfcfd6f37f0b9d71f9f45a5efd5309340b547779f102b2a43e252a0c3054", 0xf9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:53 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4000000000007, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080), 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 04:55:53 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x14, &(0x7f0000000640)={r1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x0, @broadcast}}}, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) 04:55:53 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) write$P9_RCLUNK(r0, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) 04:55:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0}) r3 = creat(0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x800, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040)=0x100, 0x3) r5 = creat(0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r7, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r7, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x818, @ipv4={[], [], @multicast2}}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000}}}, 0x118) r8 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000140)={0x1, 0x1147, 0xcef1}) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCNOTTY(r5, 0x5422) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r2, 0x0, r3}) r9 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r10, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={{0x77359400}, {r11, r12/1000+30000}}) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)="d5d9853379b77a07b27be3dbcd1a659f74d98dba4c4262a18ef09f7bdedae737ff600a1238ff71040d3d84da1a7b0669342038b26d01b47ba7e2c7bf05874e3f05d3ff24350a262978a0e602abf4bd78a4a79c9ea00fef8d97187c5e9b828cebd912b28d173e1e7b566d2257f7228d213136232fb96d") 04:55:53 executing program 0: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x90800, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x1, 0x3, {0xa, 0x4e21, 0x7fffffff, @mcast2, 0x81}}}, 0x32) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl(r4, 0xffffffffffffffb0, &(0x7f0000000080)="093d95b1d06651189bad2482f5ce678d5f3866ef5b54d6e6c87e3ea23f8da6ddbea585b278480caf47") r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TCGETS(r5, 0x5401, &(0x7f00000000c0)) 04:55:53 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x1, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x11, 0x1f, 0x13f, &(0x7f0000000140)}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xd) r3 = creat(0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xcd3a87a0ff78ed01}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000000)) [ 939.215538] BFS-fs: bfs_fill_super(): Inode 0x0000000d corrupted 04:55:54 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:54 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {0x0, 0x10000000}, {}, 0x0, 0xd0, 0x8}) 04:55:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x101400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:54 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sendfile(r6, r0, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r8 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:54 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x748db1e8636a2b00, 0x0) recvfrom$llc(r5, &(0x7f0000000100)=""/1, 0x1, 0x10100, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000140)) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:54 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:54 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {}, {0x4}, {}, {}, 0x0, 0xd0, 0x80000, 0x0, 0x0, 0x0, 0x4}) 04:55:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:54 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x8, 0x3, 0x4, 0x8, 0x2, {r1, r2/1000+30000}, {0x5, 0x0, 0x9, 0xfe, 0x1, 0x5, "26dee07b"}, 0x2, 0x4, @offset=0x4, 0x6, 0x0, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf5cffff, 0x9, 0x7e0f, r4, 0x0, &(0x7f00000001c0)={0x9a0911, 0x4, [], @ptr=0xa99d}}) 04:55:54 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) socket(0x26, 0xa, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r5 = socket$inet(0x2, 0x3, 0x2) r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0) r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x748db1e8636a2b00, 0x0) recvfrom$llc(r5, &(0x7f0000000100)=""/1, 0x1, 0x10100, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000140)) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:55 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x10080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:55 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:55 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:55:55 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') 04:55:55 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:55:56 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 04:55:56 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:56 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x400) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x2, 0x8, 0xf22a, 0x5}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x8, 'vlan1\x00', {'tunl0\x00'}, 0x401}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000400)={0x2, &(0x7f0000000240)=""/113, &(0x7f00000003c0)=[{0x0, 0xf, 0xffffffff, &(0x7f00000002c0)=""/15}, {0x9, 0xc0, 0x6, &(0x7f0000000300)=""/192}]}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:56 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x6, 0x9, 0x4, 0x4000, 0x20, {0x0, 0x2710}, {0x0, 0x2, 0x20, 0xb0, 0x2, 0x4, 'r\v\"x'}, 0x5, 0x6, @userptr=0x262, 0x2d800000, 0x0, r0}) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6c7, 0x101200) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r5}) r6 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x24, 0x8000) ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000001c0)={r5, 0x2}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000040)={r5, 0x1}) ioctl(r2, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:56 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) socket(0x26, 0xa, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r5 = socket$inet(0x2, 0x3, 0x2) r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0) r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:56 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:56 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:56 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', {}, 0x1}) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) 04:55:56 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5ba}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x9, 0x404) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e23, @broadcast}, {0x6, @local}, 0x9958e04af76c0c14, {0x2, 0x4e20, @rand_addr=0x3}, 'netpci0\x00'}) sendto$inet(r1, &(0x7f0000000100)="a2d04d39469c308500f703871aab55333b9009b5c0b91ca7052afb47a8c45427", 0x20, 0x44080, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000780)={0x1a, 0x6, 0x4, 0x8001000, 0x7fff, {0x77359400}, {0x0, 0xc, 0x30, 0x5, 0x3, 0xc1, "1d826b79"}, 0x4, 0x7, @fd, 0x80000, 0x0, r1}) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2b, @empty, 0x4e24, 0x1, 'lblc\x00', 0x2, 0x9, 0x4b}, 0x2c) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000800)=0x5, 0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10) bind(r4, &(0x7f00000001c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x80) 04:55:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:57 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:57 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) socket(0x26, 0xa, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r5 = socket$inet(0x2, 0x3, 0x2) r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0) r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 942.400123] net_ratelimit: 14 callbacks suppressed [ 942.400128] protocol 88fb is buggy, dev hsr_slave_0 [ 942.400180] protocol 88fb is buggy, dev hsr_slave_1 04:55:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0xb0, 0x9, 0x3f, 0x0, 0x0, 0x7, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x1005, 0x1ff, 0x8, 0x2, 0x1, 0x535, 0xfffc}, 0xffffffffffffffff, 0xc, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_create1(0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)) 04:55:57 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r2 = creat(0x0, 0x0) socket(0x26, 0xa, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r5 = socket$inet(0x2, 0x3, 0x2) r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0) r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7) setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa}) setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:57 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:57 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:57 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:57 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10}) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x8}]}, 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x11f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30060870}, 0x40000) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:58 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x400) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x2, 0x8, 0xf22a, 0x5}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x8, 'vlan1\x00', {'tunl0\x00'}, 0x401}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000400)={0x2, &(0x7f0000000240)=""/113, &(0x7f00000003c0)=[{0x0, 0xf, 0xffffffff, &(0x7f00000002c0)=""/15}, {0x9, 0xc0, 0x6, &(0x7f0000000300)=""/192}]}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:58 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x14) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000100)=0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) [ 943.680126] protocol 88fb is buggy, dev hsr_slave_0 [ 943.680172] protocol 88fb is buggy, dev hsr_slave_1 [ 943.680234] protocol 88fb is buggy, dev hsr_slave_0 [ 943.680266] protocol 88fb is buggy, dev hsr_slave_1 04:55:58 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:58 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10}) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x8}]}, 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x11f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30060870}, 0x40000) 04:55:58 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) r1 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@remote, 0x47, r2}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:58 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0xfffffffd}, {}, {}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) [ 944.480466] protocol 88fb is buggy, dev hsr_slave_0 [ 944.480501] protocol 88fb is buggy, dev hsr_slave_1 04:55:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:59 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:55:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:59 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000080)) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)={0x9, 0x20000000001, "11"}, 0x300) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0}) 04:55:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0xfffffffd}, {}, {}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 04:55:59 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000000c0)={0x7, 'veth0_to_bridge\x00', {}, 0x3}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x450, 0x8001, 0x0, 0x8, 0x0, {}, {}, {0x0, 0x0, 0x3}, {}, 0x0, 0xd0}) r2 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x8, 0xffffffffffffffaf) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000100)={0x9, 0x31c, 0x2, 0x4, 0x800}) [ 945.120547] protocol 88fb is buggy, dev hsr_slave_0 [ 945.121204] protocol 88fb is buggy, dev hsr_slave_0 04:55:59 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:55:59 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:56:00 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:56:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:56:00 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = creat(0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) bind$netrom(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x30005, 0x0) 04:56:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:56:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:56:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:56:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) 04:56:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) [ 945.311011] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 945.311044] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 945.400966] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 945.400992] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 945.484829] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 945.484903] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 945.560552] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 945.560590] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 945.818126] kobject: 'loop5' (ffff8880a422d660): kobject_uevent_env [ 945.818154] kobject: 'loop5' (ffff8880a422d660): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 945.916410] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 945.916447] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 946.007119] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 946.007149] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 946.085311] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 946.085351] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 946.162130] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 946.162159] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 946.243188] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env [ 946.243224] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 946.748697] kobject: 'loop5' (ffff8880a422d660): kobject_uevent_env [ 946.748725] kobject: 'loop5' (ffff8880a422d660): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1144.802473] INFO: task syz-executor.3:16346 blocked for more than 140 seconds. [ 1144.802482] Not tainted 4.14.163-syzkaller #0 [ 1144.802485] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1144.802490] syz-executor.3 D28528 16346 9273 0x00000004 [ 1144.802511] Call Trace: [ 1144.802532] __schedule+0x7b8/0x1cd0 [ 1144.802540] ? __mutex_lock+0x737/0x1470 [ 1144.802553] ? firmware_map_remove+0x196/0x196 [ 1144.802567] schedule+0x92/0x1c0 [ 1144.802576] schedule_preempt_disabled+0x13/0x20 [ 1144.802585] __mutex_lock+0x73c/0x1470 [ 1144.802599] ? fb_release+0x55/0x150 [ 1144.802611] ? mutex_trylock+0x1c0/0x1c0 [ 1144.802698] ? do_lock_file_wait.part.0+0x1c0/0x1c0 [ 1144.802713] ? fsnotify+0x11e0/0x11e0 [ 1144.802723] ? unregister_framebuffer+0x40/0x40 [ 1144.802732] mutex_lock_nested+0x16/0x20 [ 1144.802740] ? mutex_lock_nested+0x16/0x20 [ 1144.802747] fb_release+0x55/0x150 [ 1144.802757] ? unregister_framebuffer+0x40/0x40 [ 1144.802766] __fput+0x275/0x7a0 [ 1144.802779] ____fput+0x16/0x20 [ 1144.802788] task_work_run+0x114/0x190 [ 1144.802802] exit_to_usermode_loop+0x1da/0x220 [ 1144.802814] do_syscall_64+0x4bc/0x640 [ 1144.802822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1144.802835] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1144.802842] RIP: 0033:0x414ae1 [ 1144.802847] RSP: 002b:00007ffde431c4b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1144.802856] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000414ae1 [ 1144.802861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1144.802866] RBP: 0000000000000001 R08: ffffffff812aed7d R09: 00000000dbed58ec [ 1144.802871] R10: 00007ffde431c590 R11: 0000000000000293 R12: 000000000075c9a0 [ 1144.802876] R13: 000000000075c9a0 R14: 0000000000760ff0 R15: 000000000075bf2c [ 1144.802891] ? __phys_addr+0x2d/0xe0 [ 1144.802910] [ 1144.802910] Showing all locks held in the system: [ 1144.802922] 1 lock held by khungtaskd/1056: [ 1144.802927] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 1144.802968] 1 lock held by rsyslogd/7097: [ 1144.802970] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 1144.802994] 2 locks held by getty/7220: [ 1144.802997] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1144.803015] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1144.803067] 2 locks held by getty/7221: [ 1144.803070] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1144.803088] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1144.803108] 2 locks held by getty/7222: [ 1144.803111] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1144.803127] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1144.803147] 2 locks held by getty/7223: [ 1144.803150] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1144.803167] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1144.803187] 2 locks held by getty/7224: [ 1144.803189] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1144.803207] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1144.803227] 2 locks held by getty/7225: [ 1144.803229] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1144.803247] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1144.803266] 2 locks held by getty/7226: [ 1144.803269] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1144.803286] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1144.803414] 1 lock held by syz-executor.3/16346: [ 1144.803417] #0: (&fb_info->lock){+.+.}, at: [] fb_release+0x55/0x150 [ 1144.803436] [ 1144.803439] ============================================= [ 1144.803439] [ 1144.803444] NMI backtrace for cpu 0 [ 1144.803452] CPU: 0 PID: 1056 Comm: khungtaskd Not tainted 4.14.163-syzkaller #0 [ 1144.803457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.803460] Call Trace: [ 1144.803470] dump_stack+0x142/0x197 [ 1144.803482] nmi_cpu_backtrace.cold+0x57/0x94 [ 1144.803536] ? irq_force_complete_move.cold+0x7d/0x7d [ 1144.803546] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 1144.803557] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1144.803566] watchdog+0x5e7/0xb90 [ 1144.803580] kthread+0x319/0x430 [ 1144.803588] ? hungtask_pm_notify+0x50/0x50 [ 1144.803594] ? kthread_create_on_node+0xd0/0xd0 [ 1144.803604] ret_from_fork+0x24/0x30 [ 1144.803620] Sending NMI from CPU 0 to CPUs 1: [ 1144.804449] NMI backtrace for cpu 1 [ 1144.804453] CPU: 1 PID: 16350 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0 [ 1144.804456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.804459] task: ffff88804e5e01c0 task.stack: ffff8881a1040000 [ 1144.804461] RIP: 0010:match_held_lock+0x2d5/0x5f0 [ 1144.804464] RSP: 0018:ffff8880aed075b8 EFLAGS: 00000046 [ 1144.804468] RAX: dffffc0000000000 RBX: ffff88804e5e0a40 RCX: ffff88804e5e0a40 [ 1144.804471] RDX: 0000000000000000 RSI: ffffffff87f88620 RDI: ffff88804e5e0a62 [ 1144.804474] RBP: ffff8880aed07630 R08: 1ffff11008d40b84 R09: ffffed1008d40b8b [ 1144.804477] R10: ffffed1008d40b8a R11: ffff888046a05c57 R12: 0000000000000000 [ 1144.804480] R13: 1ffff11015da0eb9 R14: ffffffff87f88620 R15: ffff8880aed07608 [ 1144.804483] FS: 00007fe609686700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 1144.804486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1144.804489] CR2: 000000c433c34780 CR3: 000000020e1a4000 CR4: 00000000001406e0 [ 1144.804492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1144.804495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1144.804496] Call Trace: [ 1144.804498] [ 1144.804500] ? save_trace+0x290/0x290 [ 1144.804502] ? kmem_cache_alloc_node_trace+0x379/0x770 [ 1144.804504] __lock_is_held+0xb6/0x140 [ 1144.804506] ? check_preemption_disabled+0x3c/0x250 [ 1144.804508] lock_is_held_type+0x110/0x210 [ 1144.804511] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1144.804513] rcu_read_lock_sched_held+0x110/0x130 [ 1144.804515] consume_skb+0x276/0x340 [ 1144.804517] sctp_chunk_put+0x179/0x270 [ 1144.804519] sctp_chunk_free+0x56/0x70 [ 1144.804521] sctp_packet_transmit+0x113f/0x3010 [ 1144.804524] ? sctp_packet_config+0x9f0/0x9f0 [ 1144.804526] ? sctp_packet_transmit_chunk+0x39/0x14e [ 1144.804528] ? sctp_transport_burst_limited+0x17b/0x1c0 [ 1144.804530] sctp_outq_flush+0xd13/0x31b0 [ 1144.804533] ? __sctp_outq_teardown+0xde0/0xde0 [ 1144.804535] ? mod_timer+0x571/0xeb0 [ 1144.804537] ? mod_timer_pending+0x1030/0x1030 [ 1144.804539] ? prandom_u32_state+0x13/0x180 [ 1144.804541] ? sctp_transport_hold+0x85/0xb0 [ 1144.804543] sctp_outq_uncork+0x60/0x70 [ 1144.804545] sctp_do_sm+0x417/0x4ae0 [ 1144.804547] ? sctp_do_8_2_transport_strike.isra.0+0x880/0x880 [ 1144.804549] ? __lock_acquire+0x5f7/0x4620 [ 1144.804551] ? trace_hardirqs_on+0x10/0x10 [ 1144.804553] ? trace_hardirqs_on+0x10/0x10 [ 1144.804555] ? trace_hardirqs_on+0x10/0x10 [ 1144.804558] ? sctp_generate_heartbeat_event+0x22a/0x400 [ 1144.804560] ? debug_object_deactivate+0x1cc/0x350 [ 1144.804562] ? __lock_is_held+0xb6/0x140 [ 1144.804564] sctp_generate_heartbeat_event+0x1dd/0x400 [ 1144.804566] call_timer_fn+0x161/0x670 [ 1144.804569] ? sctp_generate_t3_rtx_event+0x2f0/0x2f0 [ 1144.804571] ? __next_timer_interrupt+0x140/0x140 [ 1144.804573] ? trace_hardirqs_on_caller+0x19b/0x590 [ 1144.804575] run_timer_softirq+0x5b7/0x1520 [ 1144.804577] ? sctp_generate_t3_rtx_event+0x2f0/0x2f0 [ 1144.804579] ? add_timer+0xae0/0xae0 [ 1144.804581] ? __lock_is_held+0xb6/0x140 [ 1144.804584] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1144.804586] __do_softirq+0x244/0x9a0 [ 1144.804588] ? sched_clock+0x2e/0x50 [ 1144.804589] irq_exit+0x160/0x1b0 [ 1144.804592] smp_apic_timer_interrupt+0x146/0x5e0 [ 1144.804594] apic_timer_interrupt+0x96/0xa0 [ 1144.804595] [ 1144.804597] RIP: 0010:__sanitizer_cov_trace_pc+0x1d/0x60 [ 1144.804600] RSP: 0018:ffff8881a1047208 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10 [ 1144.804605] RAX: ffff88804e5e01c0 RBX: 0000000000001400 RCX: 0000000000000000 [ 1144.804608] RDX: 0000000000000000 RSI: ffff8880000a0000 RDI: ffff8880a5fcc340 [ 1144.804611] RBP: ffff8881a1047248 R08: 0000000000001400 R09: 0000000000000040 [ 1144.804614] R10: ffffed1014be6e43 R11: ffff8880a5f3721f R12: 0000000000000000 [ 1144.804616] R13: 0000000000000000 R14: ffff8880000a0000 R15: 0000000000000000 [ 1144.804619] ? bitfill_aligned+0x26/0x190 [ 1144.804620] cfb_fillrect+0x3d0/0x720 [ 1144.804622] ? cfb_fillrect+0x720/0x720 [ 1144.804624] vga16fb_fillrect+0x618/0x1880 [ 1144.804626] ? memcpy+0x46/0x50 [ 1144.804628] bit_clear_margins+0x2d5/0x4f0 [ 1144.804630] ? bit_bmove+0x240/0x240 [ 1144.804632] ? efifb_probe.cold+0x1379/0x1379 [ 1144.804634] fbcon_clear_margins+0x292/0x320 [ 1144.804635] fbcon_switch+0xd38/0x1820 [ 1144.804637] ? fbcon_set_def_font+0x360/0x360 [ 1144.804639] ? fbcon_set_origin+0x21/0x50 [ 1144.804640] ? fbcon_scrolldelta+0x1100/0x1100 [ 1144.804642] ? set_origin+0x108/0x3c0 [ 1144.804644] redraw_screen+0x335/0x7c0 [ 1144.804645] ? con_flush_chars+0x90/0x90 [ 1144.804647] ? fbcon_set_palette+0x203/0x5b0 [ 1144.804649] fbcon_modechanged+0x59e/0x880 [ 1144.804650] fbcon_set_all_vcs+0x35f/0x420 [ 1144.804652] fbcon_event_notify+0x75/0x17af [ 1144.804654] ? lock_acquire+0x16f/0x430 [ 1144.804656] notifier_call_chain+0x111/0x1b0 [ 1144.804658] blocking_notifier_call_chain+0x80/0xa0 [ 1144.804659] fb_notifier_call_chain+0x25/0x30 [ 1144.804661] fb_set_var+0xb09/0xcf0 [ 1144.804663] ? fb_set_suspend+0x110/0x110 [ 1144.804664] ? lock_acquire+0x16f/0x430 [ 1144.804666] ? lock_fb_info+0x1f/0x80 [ 1144.804668] ? lock_fb_info+0x1f/0x80 [ 1144.804669] ? __mutex_lock+0x36a/0x1470 [ 1144.804671] ? trace_hardirqs_on+0x10/0x10 [ 1144.804673] ? mutex_trylock+0x1c0/0x1c0 [ 1144.804674] ? down+0x50/0x90 [ 1144.804676] ? mutex_lock_nested+0x16/0x20 [ 1144.804677] ? mutex_lock_nested+0x16/0x20 [ 1144.804679] do_fb_ioctl+0x3cc/0x940 [ 1144.804681] ? fb_read+0x520/0x520 [ 1144.804682] ? avc_has_extended_perms+0x8ec/0xe40 [ 1144.804684] ? futex_wake+0x134/0x430 [ 1144.804686] ? avc_ss_reset+0x110/0x110 [ 1144.804687] ? __lock_acquire+0x5f7/0x4620 [ 1144.804689] ? trace_hardirqs_on+0x10/0x10 [ 1144.804691] ? __might_sleep+0x93/0xb0 [ 1144.804692] ? __fget+0x210/0x370 [ 1144.804693] fb_ioctl+0xe6/0x130 [ 1144.804695] ? do_fb_ioctl+0x940/0x940 [ 1144.804697] do_vfs_ioctl+0x7ae/0x1060 [ 1144.804699] ? selinux_file_mprotect+0x5d0/0x5d0 [ 1144.804700] ? lock_downgrade+0x740/0x740 [ 1144.804702] ? ioctl_preallocate+0x1c0/0x1c0 [ 1144.804703] ? __fget+0x237/0x370 [ 1144.804705] ? security_file_ioctl+0x89/0xb0 [ 1144.804707] SyS_ioctl+0x8f/0xc0 [ 1144.804708] ? do_vfs_ioctl+0x1060/0x1060 [ 1144.804710] do_syscall_64+0x1e8/0x640 [ 1144.804712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1144.804714] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1144.804715] RIP: 0033:0x45af49 [ 1144.804717] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1144.804729] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1144.804732] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004 [ 1144.804734] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1144.804736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4 [ 1144.804739] R13: 00000000004c3903 R14: 00000000004d9f18 R15: 00000000ffffffff [ 1144.804740] Code: 85 00 03 00 00 44 8b 25 4a 4d 6f 08 45 85 e4 0f 84 7e ec 00 00 45 31 e4 48 b8 00 00 00 00 00 fc ff df 49 c7 44 05 00 00 00 00 00 <48> 83 c4 50 44 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 bc 01 [ 1144.804806] Kernel panic - not syncing: hung_task: blocked tasks [ 1144.804814] CPU: 0 PID: 1056 Comm: khungtaskd Not tainted 4.14.163-syzkaller #0 [ 1144.804818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.804821] Call Trace: [ 1144.804830] dump_stack+0x142/0x197 [ 1144.804841] panic+0x1f9/0x42d [ 1144.804848] ? add_taint.cold+0x16/0x16 [ 1144.804860] ? irq_force_complete_move.cold+0x7d/0x7d [ 1144.804872] watchdog+0x5f8/0xb90 [ 1144.804886] kthread+0x319/0x430 [ 1144.804893] ? hungtask_pm_notify+0x50/0x50 [ 1144.804900] ? kthread_create_on_node+0xd0/0xd0 [ 1144.804913] ret_from_fork+0x24/0x30 [ 1144.806460] Kernel Offset: disabled [ 1146.155986] Rebooting in 86400 seconds..