0000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 357.792802] device syz_tun entered promiscuous mode [ 357.923446] device syz_tun left promiscuous mode 21:45:17 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') socket$kcm(0x29, 0x1000000000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000001100)=""/253, 0xfd}], 0x1, 0x182) 21:45:17 executing program 2: socketpair$unix(0x1, 0x8000000000000003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="ed", 0x1}], 0x1}, 0x200000d0) 21:45:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x80000000000009) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) fchmod(r0, 0x0) 21:45:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget(0xffffffffffffffff, 0x6, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x0, 0x7}, {}], 0x3) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000a80)=[0x5]) 21:45:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 21:45:17 executing program 0: unshare(0x2000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x1, 0x0, &(0x7f0000000080)) 21:45:17 executing program 2: r0 = gettid() timer_create(0x7, &(0x7f00000003c0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) rt_sigtimedwait(&(0x7f0000000000)={0xffffffff}, 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x9}}, 0x0) 21:45:17 executing program 3: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 21:45:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget(0xffffffffffffffff, 0x6, 0x0) semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}, {0x0, 0x7}, {}], 0x3) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000a80)=[0x5]) 21:45:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:45:17 executing program 0: r0 = socket(0x15, 0x80005, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, {0x0}, 0x0}, 0xa0) 21:45:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) 21:45:18 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f041, 0x0, [], @p_u16=0x0}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 21:45:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='dns_resolver\x00', 0xfffffffffffffffd) 21:45:18 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000380)="002cba69819bacf2b6247429895c41e152ff4b5b5ada31341c9471f888af4b734c5dbf4124fc2830c3ee74c72998bde0f2efc784f371a383e2e5b3821e67e7090bf1281d1f4ee116c670a5e1a76d0156c593e3893caf4a9fa60aa581394ed54467", 0x61, 0xfffffffffffffff9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x488, 0x140, 0x280, 0x280, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'rose0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @empty}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev, @local}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_team\x00'}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:45:18 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f0000000180)) [ 359.198539] vivid-000: disconnect [ 359.259258] vivid-000: reconnect 21:45:18 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x56, 0x0) lseek(r1, 0x4, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') [ 359.522538] net_ratelimit: 18 callbacks suppressed [ 359.522558] protocol 88fb is buggy, dev hsr_slave_0 [ 359.533318] protocol 88fb is buggy, dev hsr_slave_1 [ 359.602718] protocol 88fb is buggy, dev hsr_slave_0 [ 359.608716] protocol 88fb is buggy, dev hsr_slave_1 [ 359.762510] protocol 88fb is buggy, dev hsr_slave_0 [ 359.768194] protocol 88fb is buggy, dev hsr_slave_1 [ 360.002627] protocol 88fb is buggy, dev hsr_slave_0 [ 360.008153] protocol 88fb is buggy, dev hsr_slave_1 [ 360.402572] protocol 88fb is buggy, dev hsr_slave_0 [ 360.408073] protocol 88fb is buggy, dev hsr_slave_1 21:45:20 executing program 2: futex(&(0x7f00000001c0), 0x400000085, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000180), 0x4034000004) 21:45:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0xc, 0x0, 0x0) 21:45:20 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000fc0)={'filter\x00'}, &(0x7f00000000c0)=0x54) 21:45:20 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0xf, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1], 0x6558}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 21:45:20 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000380)="002cba69819bacf2b6247429895c41e152ff4b5b5ada31341c9471f888af4b734c5dbf4124fc2830c3ee74c72998bde0f2efc784f371a383e2e5b3821e67e7090bf1281d1f4ee116c670a5e1a76d0156c593e3893caf4a9fa60aa581394ed54467", 0x61, 0xfffffffffffffff9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x488, 0x140, 0x280, 0x280, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'rose0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @empty}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev, @local}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_team\x00'}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:20 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa7, 0x4, 0x100000001, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000002c0)}, 0x10) 21:45:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 21:45:20 executing program 3: unshare(0x20400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 21:45:20 executing program 4: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) umount2(&(0x7f00000002c0)='.\x00', 0x0) 21:45:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0xc, 0x0, 0x0) 21:45:20 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl(r0, 0x40084146, 0x0) 21:45:21 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000380)="002cba69819bacf2b6247429895c41e152ff4b5b5ada31341c9471f888af4b734c5dbf4124fc2830c3ee74c72998bde0f2efc784f371a383e2e5b3821e67e7090bf1281d1f4ee116c670a5e1a76d0156c593e3893caf4a9fa60aa581394ed54467", 0x61, 0xfffffffffffffff9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x488, 0x140, 0x280, 0x280, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'rose0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @empty}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev, @local}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_team\x00'}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:21 executing program 1: creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00000000c0)='security.capability\x00', 0x14, 0x0) 21:45:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}}, 0x14}}, 0x0) 21:45:21 executing program 3: unshare(0x2000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x0, 0x0, &(0x7f0000000140)=0x19361f5328f8f071) 21:45:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0xc, 0x0, 0x0) 21:45:21 executing program 2: syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) timerfd_create(0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000380)={0x7f}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 21:45:21 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001140)={0x41, 0x4}, 0x10) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 21:45:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) utimensat(r1, 0x0, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) 21:45:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)) 21:45:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0xc, 0x0, 0x0) 21:45:21 executing program 1: ioprio_set$pid(0x0, 0x0, 0x4cfa) 21:45:21 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000380)="002cba69819bacf2b6247429895c41e152ff4b5b5ada31341c9471f888af4b734c5dbf4124fc2830c3ee74c72998bde0f2efc784f371a383e2e5b3821e67e7090bf1281d1f4ee116c670a5e1a76d0156c593e3893caf4a9fa60aa581394ed54467", 0x61, 0xfffffffffffffff9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x488, 0x140, 0x280, 0x280, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@arp={@rand_addr, @empty, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'rose0\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @empty}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev, @local}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @mac=@link_local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_team\x00'}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:21 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280), 0x0) 21:45:22 executing program 4: personality(0x2000c) uname(&(0x7f0000000440)=""/176) 21:45:22 executing program 3: r0 = socket$inet(0x11, 0x40000000000803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@alg, 0xff3e, &(0x7f0000001800)=[{&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000640)=""/224, 0xe0}, {&(0x7f0000000740)=""/112, 0x70}, {&(0x7f00000007c0)=""/61, 0x3d}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x8, &(0x7f0000000000)=""/226, 0xe2}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="050166e4d8", 0x5, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f0000001a00)=@broute={'broute\x00', 0x20, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20011000], 0x0, &(0x7f0000000300), &(0x7f0000001940)=ANY=[]}, 0x78) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc_llcp={0x27, 0x9, 0x0, 0x0, 0x0, 0x0, "f0aeec0d840130e5c5485e44a7627f9a8864abed4d4460dd5b1a0182c6c84a143e64f31d1c11349c949054860b9c131950a610e2736612827582530c3c1df9"}, 0x60, &(0x7f0000000380), 0x9c}, 0x0) 21:45:22 executing program 5: unshare(0x20400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) pwritev(r0, 0x0, 0x0, 0x0) 21:45:22 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x100000000000004) 21:45:22 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'team0\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000000)={@link_local, @broadcast, [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000140)) 21:45:22 executing program 2: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0x15}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x2b7}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)="d09a0e633a47", 0x6}], 0x1}, 0x0) 21:45:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') lseek(r0, 0x800000000000063, 0x0) 21:45:22 executing program 5: syz_emit_ethernet(0x3e2, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 21:45:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x80ffffff, 0xb, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 21:45:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="41a30f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x6e0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) 21:45:22 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x0, [], 0xc}) 21:45:23 executing program 3: ustat(0x800000000000e, &(0x7f0000000000)) 21:45:23 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) 21:45:23 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000007c0)={0x0, 0x0, 0x300e}) 21:45:23 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x1c9c380}, &(0x7f0000048000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) exit(0x0) 21:45:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) mlock(&(0x7f0000f4c000/0x2000)=nil, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mincore(&(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000040)=""/4096) 21:45:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x5000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 21:45:23 executing program 1: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r2, &(0x7f00000001c0)='./file0/file0/file0/file0\x00', r2, &(0x7f0000284000)='./file0/file0/file0/file0\x00', 0x0) 21:45:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000004c0), 0x24, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:45:23 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x200003, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) [ 364.562560] net_ratelimit: 22 callbacks suppressed [ 364.562579] protocol 88fb is buggy, dev hsr_slave_0 [ 364.573328] protocol 88fb is buggy, dev hsr_slave_1 21:45:23 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x4008af30, &(0x7f0000000280)) ioctl$VT_OPENQRY(r2, 0x5600, 0x0) close(r0) 21:45:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x8100, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8}, @connlabel={'connlabel\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x2a8) 21:45:23 executing program 3: unshare(0x20400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240)=0x400000005, 0x4) 21:45:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x9}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) [ 364.999329] cannot load conntrack support for proto=7 21:45:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x8100, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8}, @connlabel={'connlabel\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x2a8) 21:45:24 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000300)=""/250, 0xfd63) fcntl$setpipe(r1, 0x407, 0xf2ce) [ 365.282688] protocol 88fb is buggy, dev hsr_slave_0 [ 365.288354] protocol 88fb is buggy, dev hsr_slave_1 [ 365.326449] cannot load conntrack support for proto=7 21:45:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x9}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) 21:45:24 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x6d, 0x20000000000001, 0x0, 0x0}, 0xbe) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) 21:45:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x8100, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8}, @connlabel={'connlabel\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x2a8) 21:45:24 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x0, 0x0, "d2478fa84397c46413d801d9e164b59319308c10320302cf"}) 21:45:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x34, 0x1a, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @mcast1}]}, 0x34}}, 0x0) [ 365.733709] cannot load conntrack support for proto=7 21:45:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="8d141f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 365.762562] protocol 88fb is buggy, dev hsr_slave_0 [ 365.768239] protocol 88fb is buggy, dev hsr_slave_1 21:45:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x9}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) [ 365.844358] protocol 88fb is buggy, dev hsr_slave_0 [ 365.850156] protocol 88fb is buggy, dev hsr_slave_1 21:45:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget(0x2, 0x7000, 0x1000, &(0x7f0000ff8000/0x7000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/110) 21:45:25 executing program 5: creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xfffffffffffffffa) write(r1, &(0x7f00000001c0), 0x100000073) [ 366.002648] protocol 88fb is buggy, dev hsr_slave_0 [ 366.008347] protocol 88fb is buggy, dev hsr_slave_1 21:45:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket(0xa, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x8100, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8}, @connlabel={'connlabel\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x2a8) 21:45:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x9}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) 21:45:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x1b) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x2) 21:45:25 executing program 0: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0), 0xdc632df870a7771b) 21:45:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="fd4f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 366.387961] cannot load conntrack support for proto=7 21:45:25 executing program 4: creat(&(0x7f00000001c0)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000700), 0x24, 0x0) llistxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/175, 0xaf) 21:45:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00\x00\x00\x00\x00\x03\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x380, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth0_to_team\x00', 'bcsf0\x00', 'vlan0\x00', @broadcast, [], @local, [], 0xd8, 0x138, 0x168, [@pkttype={'pkttype\x00', 0x8}, @cluster={'cluster\x00', 0x10, {{0x7769}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00', 'erspan0\x00', 'eql\x00', @local, [], @dev, [], 0xa0, 0xa0, 0xd0, [@m802_3={'802_3\x00', 0x8}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x3f8) 21:45:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000000000)=""/57, 0x39) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents64(r0, &(0x7f00000000c0)=""/46, 0x2e) 21:45:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x1b) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x2) 21:45:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x2803, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x9, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) [ 366.929396] xt_cluster: you have exceeded the maximum number of cluster nodes (30569 > 32) 21:45:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) close(r2) close(r0) 21:45:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5504, &(0x7f0000000080)) [ 367.080092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x40000001], [0xc2]}) 21:45:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x5000) 21:45:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x2803, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x9, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 21:45:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x1b) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x2) [ 367.417487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0585604, &(0x7f0000000000)) 21:45:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) 21:45:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x2803, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x9, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 21:45:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x1b) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x2) 21:45:26 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x58, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 21:45:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00\x00\b\x00\x00\xff\x0f\x00\x00\x00\x00\x00\x11\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe6a, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_newneigh={0x34, 0x1c, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x4, 0x0, 0x1}, [@NDA_LLADDR={0xc, 0x2, @random="63c990c236dc"}, @NDA_DST_MAC={0xc}]}, 0x34}}, 0x0) [ 367.829332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc) 21:45:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) 21:45:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x6c00, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x2803, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x9, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 21:45:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x1000000000013) 21:45:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0xffffff8d, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xf083}], 0xd}, 0x0) [ 368.221138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:45:27 executing program 0: syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) write(r0, 0x0, 0x0) 21:45:27 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x400000000000fd, &(0x7f0000000040), &(0x7f0000000100)=0x4) 21:45:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) 21:45:27 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x1, r1, 0x0) 21:45:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x6, 0x200000000000000a, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r3, 0x0) 21:45:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) 21:45:27 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f0000d1df52)=""/174) 21:45:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}}) 21:45:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x2200) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) 21:45:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) 21:45:28 executing program 1: mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0xfffffffffffffffc, 0x5, 0x0) 21:45:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe55KoS\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aud>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_misc(r0, &(0x7f0000000140)={'sy\x88\xa8'}, 0x4) 21:45:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000001340)=""/107, 0x6b}, {&(0x7f0000000100)=""/16, 0x10}], 0x5, &(0x7f0000001440)=""/216, 0xd8}}, {{&(0x7f0000001540)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/128, 0x80}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)=""/95, 0x5f}, {&(0x7f00000018c0)=""/72, 0x48}], 0x2}, 0xf9d}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001a00)=""/58, 0x3a}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/202, 0xca}, 0x6c}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003340)=""/46, 0x2e}, {&(0x7f0000003380)=""/236, 0xec}, {&(0x7f0000003480)=""/238, 0xee}, {&(0x7f0000003580)=""/130, 0x82}, {&(0x7f0000003980)=""/132, 0x84}], 0x5, &(0x7f0000003780)=""/94, 0x5e}}], 0x5, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:45:30 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = inotify_init() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x80000003) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='v'], 0x1) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) 21:45:30 executing program 1: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/24, 0x18}], 0x1, &(0x7f00000008c0)=[{&(0x7f0000000c00)=""/109, 0x6d}, {&(0x7f0000000f00)=""/173, 0xad}, {&(0x7f0000000780)=""/41, 0x29}], 0x3, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x6, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000001340)=""/107, 0x6b}, {&(0x7f0000000100)=""/16, 0x10}], 0x5, &(0x7f0000001440)=""/216, 0xd8}}, {{&(0x7f0000001540)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/128, 0x80}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)=""/95, 0x5f}, {&(0x7f00000018c0)=""/72, 0x48}], 0x2}, 0xf9d}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001a00)=""/58, 0x3a}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/202, 0xca}, 0x6c}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003340)=""/46, 0x2e}, {&(0x7f0000003380)=""/236, 0xec}, {&(0x7f0000003480)=""/238, 0xee}, {&(0x7f0000003580)=""/130, 0x82}, {&(0x7f0000003980)=""/132, 0x84}], 0x5, &(0x7f0000003780)=""/94, 0x5e}}], 0x5, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 21:45:30 executing program 4: r0 = inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x9d) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 21:45:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x980913, 0x0, [], @value64}}) 21:45:30 executing program 3: r0 = socket$inet(0x2, 0x2000000080002, 0x0) socketpair$unix(0x1, 0x8000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, 0x0, &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00\x00\x00\x00\b\x00', 'sit0\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'bond0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0xb0, 0xb0, 0xe0, [@time={'time\x00', 0x18, {{0x0, 0x0, 0x0, 0xfeffff07}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1e8) 21:45:30 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000001f80), 0x0) 21:45:30 executing program 4: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a2e000900210008004b00ca8a9848a3090900006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1}, 0x0) 21:45:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0x2}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 21:45:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @rand_addr="a48091cdae605f4dfb8b6888921325a1"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x84) 21:45:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000001340)=""/107, 0x6b}, {&(0x7f0000000100)=""/16, 0x10}], 0x5, &(0x7f0000001440)=""/216, 0xd8}}, {{&(0x7f0000001540)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/128, 0x80}], 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)=""/95, 0x5f}, {&(0x7f00000018c0)=""/72, 0x48}], 0x2}, 0xf9d}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001a00)=""/58, 0x3a}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/202, 0xca}, 0x6c}, {{&(0x7f00000032c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003340)=""/46, 0x2e}, {&(0x7f0000003380)=""/236, 0xec}, {&(0x7f0000003480)=""/238, 0xee}, {&(0x7f0000003580)=""/130, 0x82}, {&(0x7f0000003980)=""/132, 0x84}], 0x5, &(0x7f0000003780)=""/94, 0x5e}}], 0x5, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 371.817487] xt_time: invalid argument - start or stop time greater than 23:59:59 21:45:31 executing program 3: r0 = socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/174, 0xae}], 0x1) 21:45:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/207) 21:45:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_int(r0, 0x0, 0x200000000000000e, 0x0, &(0x7f0000000100)=0x11) 21:45:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @initdev}, {0x2, 0x0, @empty}, 0x6}) [ 372.156865] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 21:45:31 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0xb, @win={{0x38305343}, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}) 21:45:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700d96fbd890000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 21:45:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8}}, [""]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0xfffffffffffffe7a, 0x0}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1a4, 0x6800) 21:45:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x402, 0x6}}) 21:45:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000009c0)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x10f00d}) 21:45:31 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = dup2(r0, r0) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 372.843049] Disabled LAPIC found during irq injection 21:45:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @rand_addr="a48091cdae605f4dfb8b6888921325a1"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x84) 21:45:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700d96fbd890000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 21:45:31 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000180), 0x4) 21:45:32 executing program 2: clone(0x2100001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0xc00000000000007, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21:45:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x802200000000005, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x90) 21:45:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2000000001, @pix_mp={0x0, 0x0, 0x34524742}}) 21:45:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700d96fbd890000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 21:45:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x0, 0x0) 21:45:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4e) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x37, '\x00'}], 0x18}}], 0x1, 0x0) 21:45:32 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r1 = memfd_create(&(0x7f0000000380)='#vmnet1nodevem1\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f00000000c0)) 21:45:32 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "62fb6403"}, 0x0, 0x0, @planes=0x0, 0x4}) 21:45:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r1, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700d96fbd890000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 21:45:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @rand_addr="a48091cdae605f4dfb8b6888921325a1"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x84) 21:45:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001300090468fe0700000000000700ff3f04000000450001070000001419001a0006000000020000000208000800005d14dfb51571a4", 0x39}], 0x1) 21:45:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0xc}, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000162, 0x0) 21:45:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0xa, 0x3, 0x7b) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) dup3(r1, r2, 0x0) 21:45:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_test={0x6}}) close(r2) close(r1) 21:45:33 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x4000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 21:45:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0xffe, {0x0, 0x0, 0x7, 0xfffffffffffffffb}}) 21:45:33 executing program 3: mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r0) 21:45:33 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x1e\x0f\x01\x9f\x97:$m>\xa0\x8d\xba\x04\x8c\xcb\xb6,^\xc6k\xf0\x14\vY>', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x82) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x9e\xc7z\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) write$P9_RSTAT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="72ff120000c1ff004003000000301ccafda548ea0000000000000000"], 0x1c) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0x3fd, @time, {}, {}, @time=@time={0x77359400}}], 0x30) 21:45:33 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendmsg$netlink(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000004080)=[@cred={0x20}], 0x20}, 0x0) 21:45:33 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0xffe, {0x0, 0x0, 0x7, 0xfffffffffffffffb}}) 21:45:33 executing program 3: clone(0x2002002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) sched_rr_get_interval(r3, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/111}, 0x77, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 374.962534] net_ratelimit: 22 callbacks suppressed [ 374.962553] protocol 88fb is buggy, dev hsr_slave_0 [ 374.973440] protocol 88fb is buggy, dev hsr_slave_1 21:45:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @rand_addr="a48091cdae605f4dfb8b6888921325a1"}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x84) 21:45:34 executing program 5: mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x4004af07, &(0x7f00000127c0)={'team0\x00'}) 21:45:34 executing program 1: r0 = socket(0x80000000010, 0x100000802, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a41cd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x4d6}, {&(0x7f0000000fc0)=""/4096, 0x32}, {&(0x7f0000000400)=""/120, 0x1078}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x10}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xfffffffffffffeb2}}], 0x11a650c33d454e8, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0xffe, {0x0, 0x0, 0x7, 0xfffffffffffffffb}}) 21:45:34 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendmsg$netlink(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000004080)=[@cred={0x20}], 0x20}, 0x0) 21:45:34 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendmsg$netlink(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000004080)=[@cred={0x20}], 0x20}, 0x0) 21:45:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0xffe, {0x0, 0x0, 0x7, 0xfffffffffffffffb}}) 21:45:34 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendmsg$netlink(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000004080)=[@cred={0x20}], 0x20}, 0x0) 21:45:34 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendmsg$netlink(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000004080)=[@cred={0x20}], 0x20}, 0x0) 21:45:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 21:45:34 executing program 1: r0 = socket(0x80000000010, 0x100000802, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a41cd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x4d6}, {&(0x7f0000000fc0)=""/4096, 0x32}, {&(0x7f0000000400)=""/120, 0x1078}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x10}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xfffffffffffffeb2}}], 0x11a650c33d454e8, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040415c03b3e50570b0000000000000400c0073510fbff0000b408000100fab771172100000020"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xfe94}], 0x1}, 0x0) [ 375.682591] protocol 88fb is buggy, dev hsr_slave_0 [ 375.688309] protocol 88fb is buggy, dev hsr_slave_1 21:45:35 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendmsg$netlink(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000004080)=[@cred={0x20}], 0x20}, 0x0) 21:45:35 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendmsg$netlink(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000003d80), 0x0, &(0x7f0000004080)=[@cred={0x20}], 0x20}, 0x0) 21:45:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 21:45:35 executing program 1: r0 = socket(0x80000000010, 0x100000802, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a41cd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x4d6}, {&(0x7f0000000fc0)=""/4096, 0x32}, {&(0x7f0000000400)=""/120, 0x1078}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x10}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xfffffffffffffeb2}}], 0x11a650c33d454e8, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040415c03b3e50570b0000000000000400c0073510fbff0000b408000100fab771172100000020"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xfe94}], 0x1}, 0x0) [ 376.162893] protocol 88fb is buggy, dev hsr_slave_0 [ 376.168769] protocol 88fb is buggy, dev hsr_slave_1 21:45:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040415c03b3e50570b0000000000000400c0073510fbff0000b408000100fab771172100000020"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xfe94}], 0x1}, 0x0) [ 376.265128] protocol 88fb is buggy, dev hsr_slave_0 [ 376.270718] protocol 88fb is buggy, dev hsr_slave_1 21:45:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) [ 376.427796] protocol 88fb is buggy, dev hsr_slave_0 [ 376.433403] protocol 88fb is buggy, dev hsr_slave_1 21:45:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@hat={'changehat ', 0x0, 0x5e, ['^*\x00', '\x00']}, 0x21) 21:45:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1b) dup2(r1, r0) 21:45:35 executing program 1: r0 = socket(0x80000000010, 0x100000802, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a41cd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x4d6}, {&(0x7f0000000fc0)=""/4096, 0x32}, {&(0x7f0000000400)=""/120, 0x1078}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x10}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xfffffffffffffeb2}}], 0x11a650c33d454e8, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040415c03b3e50570b0000000000000400c0073510fbff0000b408000100fab771172100000020"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xfe94}], 0x1}, 0x0) [ 376.584617] kauditd_printk_skb: 3 callbacks suppressed [ 376.584647] audit: type=1400 audit(1550785535.646:31): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12956 comm="syz-executor.3" 21:45:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 21:45:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000000001, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), &(0x7f00000002c0)=0x8) 21:45:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040415c03b3e50570b0000000000000400c0073510fbff0000b408000100fab771172100000020"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xfe94}], 0x1}, 0x0) 21:45:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000340), 0x2020d9d23b6e1d02, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x1d, 0x1, 0x0, 0x0, {0x7592da05}, [@nested={0x18, 0x2a, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 21:45:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040415c03b3e50570b0000000000000400c0073510fbff0000b408000100fab771172100000020"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xfe94}], 0x1}, 0x0) 21:45:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x220}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 21:45:36 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x400100000000024, 0xa, 0x0, "1760550f540400f0eb0300ef1e20000400000000000000000000da00"}) 21:45:36 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)=0xfffffffffffffffe) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)=0x1) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 21:45:36 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x801480ff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 21:45:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040415c03b3e50570b0000000000000400c0073510fbff0000b408000100fab771172100000020"], 0x38}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xfe94}], 0x1}, 0x0) 21:45:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x220}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 21:45:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x220}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 21:45:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x220}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 21:45:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x220}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 21:45:37 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x0, 0x2, [@loopback, @broadcast]}, 0x18) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local}, 0x10) 21:45:37 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)) 21:45:37 executing program 4: quotactl(0x80000100, 0x0, 0x0, 0x0) 21:45:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x220}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 21:45:37 executing program 5: mbind(&(0x7f0000ad4000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000100)=0x70c3, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 21:45:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x805, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1}], &(0x7f0000000200)=[0x0]}, 0x20}}], 0x0, 0x0, &(0x7f0000000440)}) 21:45:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1d, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$netlink(r2, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x220}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ffff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a", 0x58}], 0x1) 21:45:37 executing program 4: r0 = socket(0x40000000015, 0x805, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000540), 0x0, &(0x7f0000000480)}, 0x4000000) 21:45:37 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)) 21:45:37 executing program 3: unshare(0x20400) r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 21:45:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffb5}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) dup3(r0, r2, 0x0) [ 378.772310] binder: 13036:13037 got transaction with invalid parent offset or type [ 378.780312] binder: 13036:13037 transaction failed 29201/-22, size 40-8 line 3218 21:45:38 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) r1 = memfd_create(&(0x7f0000000200)='#vmem1\x00', 0x0) write(r1, &(0x7f0000000300)="ce", 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f00000000c0)) [ 379.010476] binder: undelivered TRANSACTION_ERROR: 29201 21:45:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @loopback}, 0xc) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 21:45:38 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)) 21:45:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000380)) 21:45:38 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000800)=ANY=[], 0xfffffd5b) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) 21:45:38 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0x2, 0x4e88, 0x0, @mcast2={0xff, 0x2, [0xe80d, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000, 0x11000000]}}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 21:45:38 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) 21:45:38 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)) 21:45:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0xfffffffffffffffd, 0x0) 21:45:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_smack_entry(r1, &(0x7f0000000240)='sec\x00\x00\x00\x83\xfcn=\xe9\xa4\xa9\xa3\xc73\x88\xec\xaf\x14\x00\x9c\x81c\xdb\x97s\xe7c}\xb7\xb7&\xb5\xd8\xf7\xd8\xe3\xc8W8\xfb\xa3e\xe7\xf8\x948I\xf8\xf4\xe8\xd4z\xcfJ@\xe0jlw4\xa4F*i\xb8^\a\xcf\xf0\xf3\x9b\xac%\xa77\xe0r\xfcY\xfd\xfb(\x8fS\x0f\xabZ\x04\xa6\xe3\xfe29<#\x97i\xec\xb0\x8bd\xf9e\x96\xb2\x14u\bIxQ\xee\x88^1\x852y\x96\xa9\\j\x9e\xc2\xfb]9\xfc\x8a\xbe}0\x92\x87\f\xb6\xa2O\x87\xc6\x80\x95d4Fc\xd5\xeb\xd3c\x11\xd2\x12P\x9d\x9c\xe9t\xd9\x96\xfa\xd1e\x81\xe85\xb1\xdct\xad\xf3p\xfe0\x89\x19$\x10\xc4\xf7\x901I\x14\x9e\x9f\x16\xffv\f>\xf9\xc5\xdd\x0e\x94\xbd&e\xac\xae\n\x1c\xb6Cg\xa82\x98\x16\x9b\x95\xfcyS\r\xf7\xcd@\'\xbd\x05\xa7\x94\xda\xb6;s\xcf[\x1d', 0x0, 0x0, 0x0) 21:45:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup2(r2, r0) 21:45:39 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r0, 0xa}], 0x1, 0x0, 0x0, 0x0) 21:45:39 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r0 = socket$inet6(0xa, 0x0, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0xa}]]}}}]}, 0x38}}, 0x0) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x0, 0x0, 0x3}}, 0x2e) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) unlink(0x0) 21:45:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {}, [@IFA_ADDRESS={0xf}, @IFA_LOCAL={0x14}]}, 0x40}}, 0x0) [ 380.322923] net_ratelimit: 18 callbacks suppressed [ 380.322943] protocol 88fb is buggy, dev hsr_slave_0 [ 380.334033] protocol 88fb is buggy, dev hsr_slave_1 21:45:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096, 0x18b}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x10102, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) [ 380.402585] protocol 88fb is buggy, dev hsr_slave_0 [ 380.408390] protocol 88fb is buggy, dev hsr_slave_1 [ 380.419570] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 380.531361] tls_set_device_offload_rx: netdev lo with no TLS offload [ 380.564552] protocol 88fb is buggy, dev hsr_slave_0 [ 380.570031] protocol 88fb is buggy, dev hsr_slave_1 [ 380.735662] tls_set_device_offload_rx: netdev lo with no TLS offload [ 380.802809] protocol 88fb is buggy, dev hsr_slave_0 [ 380.808825] protocol 88fb is buggy, dev hsr_slave_1 [ 381.204691] protocol 88fb is buggy, dev hsr_slave_0 [ 381.210205] protocol 88fb is buggy, dev hsr_slave_1 21:45:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@local, 0x0, 0x33}, 0xa, @in, 0x0, 0x1}}, 0x244) 21:45:42 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffff9c, 0x28, &(0x7f0000000240)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r1, &(0x7f0000002600)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003640)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000001180)=""/166, 0xa6}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/220, 0xdc}, {&(0x7f0000002340)=""/128, 0x80}, {&(0x7f0000000700)=""/133, 0x85}], 0x7, &(0x7f0000002500)=""/249, 0xf9, 0xfff}, 0x40) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) r5 = getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='io.stat\x00', 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000005c0)='cpuacct.usage_all\x00', 0x0, 0x0) r8 = perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x4, 0x401, 0x9ac6, 0x6, 0x0, 0xe35b, 0x10, 0x9, 0x8c32, 0x81, 0x1f93, 0x3ff, 0x3, 0x5, 0x1d, 0x2, 0x7c08, 0x0, 0x910d, 0x80, 0x1, 0xfffffffffffffd2f, 0xffffffffffff0000, 0xfffffffffffff800, 0x2, 0x3f, 0x100000, 0x3, 0x2c780000000, 0x5, 0x9, 0x9, 0x10000, 0x7fffffff, 0x8000, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x1f}, 0x242, 0x7, 0x0, 0x2, 0x7f, 0x401, 0x5}, r5, 0x0, r7, 0xb) close(r4) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) r10 = perf_event_open$cgroup(&(0x7f0000000340)={0x7, 0x70, 0x3, 0x68, 0x6, 0x1, 0x0, 0x20, 0x82154, 0x3, 0x6, 0x0, 0x2, 0x0, 0x9, 0x8, 0x0, 0x1, 0x6, 0xffff, 0x8000, 0x82e, 0xfffffffffffffff7, 0x80, 0x20, 0x5, 0x0, 0xb0, 0x100, 0x3, 0x35, 0x3, 0x7f, 0x2, 0x6, 0x1, 0x8, 0x5, 0x0, 0x9, 0x6, @perf_config_ext={0x2dc, 0x43d}, 0x4, 0x3, 0x2, 0x2, 0x3, 0x1000, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x1f) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={r9, 0x1, 0x8}, 0xfffffffffffffff8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f00000002c0)='./file0\x00'}, 0xfffffffffffffe14) openat$cgroup_int(r7, &(0x7f0000000640)='\x89high\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000580)=0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x2}, 0xfffffffffffffd8e) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 21:45:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_smack_entry(r1, &(0x7f0000000240)='sec\x00\x00\x00\x83\xfcn=\xe9\xa4\xa9\xa3\xc73\x88\xec\xaf\x14\x00\x9c\x81c\xdb\x97s\xe7c}\xb7\xb7&\xb5\xd8\xf7\xd8\xe3\xc8W8\xfb\xa3e\xe7\xf8\x948I\xf8\xf4\xe8\xd4z\xcfJ@\xe0jlw4\xa4F*i\xb8^\a\xcf\xf0\xf3\x9b\xac%\xa77\xe0r\xfcY\xfd\xfb(\x8fS\x0f\xabZ\x04\xa6\xe3\xfe29<#\x97i\xec\xb0\x8bd\xf9e\x96\xb2\x14u\bIxQ\xee\x88^1\x852y\x96\xa9\\j\x9e\xc2\xfb]9\xfc\x8a\xbe}0\x92\x87\f\xb6\xa2O\x87\xc6\x80\x95d4Fc\xd5\xeb\xd3c\x11\xd2\x12P\x9d\x9c\xe9t\xd9\x96\xfa\xd1e\x81\xe85\xb1\xdct\xad\xf3p\xfe0\x89\x19$\x10\xc4\xf7\x901I\x14\x9e\x9f\x16\xffv\f>\xf9\xc5\xdd\x0e\x94\xbd&e\xac\xae\n\x1c\xb6Cg\xa82\x98\x16\x9b\x95\xfcyS\r\xf7\xcd@\'\xbd\x05\xa7\x94\xda\xb6;s\xcf[\x1d', 0x0, 0x0, 0x0) 21:45:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x5, 0x5, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f0000000080), 0x0}, 0x18) 21:45:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000002c0)) 21:45:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000800)=ANY=[], 0xfffffd5b) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) 21:45:42 executing program 5: unshare(0x20400) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) 21:45:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendto$inet(r0, &(0x7f00000001c0)="023938f7d62a0db6c5f5d205f1944a1987535e232123fd94b1176197c394e78131178c6a9486e389e48a142b2e89ed4c06ef8f089dfc7dd7ec56e716bc3a8f8a6d363f3fe543c1f27d364db696f05eada57b89e0518a9501ea877d24ff2c74dd030aac397ccdf36c15", 0x69, 0x20000001, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x389) 21:45:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffdfffffbfffbfb1, 0x0) 21:45:42 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9300000000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000100)={0x1, {0x0, 0x989680}}) 21:45:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000017f07)={@broadcast, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @loopback}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x5, 0x0, 0x4}}}}}}, 0x0) 21:45:43 executing program 2: unshare(0x20400) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) close(r0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:45:43 executing program 0: r0 = socket(0x22, 0x2, 0x21) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") close(r0) 21:45:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r5, 0x200001a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) [ 384.248294] delete_channel: no stack [ 384.278795] delete_channel: no stack 21:45:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_smack_entry(r1, &(0x7f0000000240)='sec\x00\x00\x00\x83\xfcn=\xe9\xa4\xa9\xa3\xc73\x88\xec\xaf\x14\x00\x9c\x81c\xdb\x97s\xe7c}\xb7\xb7&\xb5\xd8\xf7\xd8\xe3\xc8W8\xfb\xa3e\xe7\xf8\x948I\xf8\xf4\xe8\xd4z\xcfJ@\xe0jlw4\xa4F*i\xb8^\a\xcf\xf0\xf3\x9b\xac%\xa77\xe0r\xfcY\xfd\xfb(\x8fS\x0f\xabZ\x04\xa6\xe3\xfe29<#\x97i\xec\xb0\x8bd\xf9e\x96\xb2\x14u\bIxQ\xee\x88^1\x852y\x96\xa9\\j\x9e\xc2\xfb]9\xfc\x8a\xbe}0\x92\x87\f\xb6\xa2O\x87\xc6\x80\x95d4Fc\xd5\xeb\xd3c\x11\xd2\x12P\x9d\x9c\xe9t\xd9\x96\xfa\xd1e\x81\xe85\xb1\xdct\xad\xf3p\xfe0\x89\x19$\x10\xc4\xf7\x901I\x14\x9e\x9f\x16\xffv\f>\xf9\xc5\xdd\x0e\x94\xbd&e\xac\xae\n\x1c\xb6Cg\xa82\x98\x16\x9b\x95\xfcyS\r\xf7\xcd@\'\xbd\x05\xa7\x94\xda\xb6;s\xcf[\x1d', 0x0, 0x0, 0x0) 21:45:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00=[_w\xe4\x13\xb1\x99\x95\x8b\x9fy\xb5!\xa0\x13.\xbcN\x9c\xca\xf9\xaf\xa3\xf2H\x9a\xa9\xdc5\"\xeaf\x00,\xa95\xcdm\x9d\x1d\x98\xad\xd1\xe0$V\xa3\x1b\xa78=\x05\x02u\x9a\x10ml\xab\x1b\xb6\xbc\xb0\xd7\xae\xdf\\[\n\xeb') lseek(r0, 0x2d, 0x0) 21:45:43 executing program 0: clone(0x140000041fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, 0x0) 21:45:43 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="0500000093c21faf16da39de706f64685e16ecfd2cfd09684d9c7afae3b51948037dc12502000000dd1203ed5f1023fa813c000000010000", 0x38}]) 21:45:43 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000800)=ANY=[], 0xfffffd5b) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) 21:45:43 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 21:45:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x4}) 21:45:44 executing program 1: unshare(0x20040600) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000040)) 21:45:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10008002) write(r1, &(0x7f0000000340)="b63db85e1e8d00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x2b) readv(r1, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/62, 0x36}], 0x1) 21:45:44 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/14, 0x7) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000280)=0xfdfdffff) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)) 21:45:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x1, "f072f71cf6ff35d794c04ad56f66284a927b8248ff29e13641bf9bd2728a344b"}) [ 385.362764] net_ratelimit: 22 callbacks suppressed [ 385.362783] protocol 88fb is buggy, dev hsr_slave_0 [ 385.373582] protocol 88fb is buggy, dev hsr_slave_1 [ 385.394588] sg_write: data in/out 36090/1 bytes for SCSI command 0x16-- guessing data in; [ 385.394588] program syz-executor.5 not setting count and/or reply_len properly 21:45:44 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r1, r0) [ 385.481854] sg_write: data in/out 36090/1 bytes for SCSI command 0x16-- guessing data in; [ 385.481854] program syz-executor.5 not setting count and/or reply_len properly 21:45:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_smack_entry(r1, &(0x7f0000000240)='sec\x00\x00\x00\x83\xfcn=\xe9\xa4\xa9\xa3\xc73\x88\xec\xaf\x14\x00\x9c\x81c\xdb\x97s\xe7c}\xb7\xb7&\xb5\xd8\xf7\xd8\xe3\xc8W8\xfb\xa3e\xe7\xf8\x948I\xf8\xf4\xe8\xd4z\xcfJ@\xe0jlw4\xa4F*i\xb8^\a\xcf\xf0\xf3\x9b\xac%\xa77\xe0r\xfcY\xfd\xfb(\x8fS\x0f\xabZ\x04\xa6\xe3\xfe29<#\x97i\xec\xb0\x8bd\xf9e\x96\xb2\x14u\bIxQ\xee\x88^1\x852y\x96\xa9\\j\x9e\xc2\xfb]9\xfc\x8a\xbe}0\x92\x87\f\xb6\xa2O\x87\xc6\x80\x95d4Fc\xd5\xeb\xd3c\x11\xd2\x12P\x9d\x9c\xe9t\xd9\x96\xfa\xd1e\x81\xe85\xb1\xdct\xad\xf3p\xfe0\x89\x19$\x10\xc4\xf7\x901I\x14\x9e\x9f\x16\xffv\f>\xf9\xc5\xdd\x0e\x94\xbd&e\xac\xae\n\x1c\xb6Cg\xa82\x98\x16\x9b\x95\xfcyS\r\xf7\xcd@\'\xbd\x05\xa7\x94\xda\xb6;s\xcf[\x1d', 0x0, 0x0, 0x0) 21:45:44 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000001740)={@broadcast, @empty, [{}], {@mpls_uc={0x8847, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}, @gre}}}}}, 0x0) 21:45:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x40004000000013, 0x10, 0xe68, 0x5}, 0x2c) 21:45:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@ipv6_deladdr={0x2c, 0x15, 0xa9758a518bc79919, 0x0, 0x0, {0xa, 0xbf}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @multicast2}}]}, 0x2c}}, 0x0) [ 386.082832] protocol 88fb is buggy, dev hsr_slave_0 [ 386.088798] protocol 88fb is buggy, dev hsr_slave_1 21:45:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000800)=ANY=[], 0xfffffd5b) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) 21:45:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') getdents64(r1, &(0x7f0000000000)=""/66, 0x18) getdents64(r1, &(0x7f0000000100)=""/4096, 0x1000) 21:45:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/14, 0x7) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000280)=0xfdfdffff) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)) 21:45:45 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x27, 0x0) 21:45:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000280)=0x0) close(r0) inotify_init1(0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 386.562491] protocol 88fb is buggy, dev hsr_slave_0 [ 386.568197] protocol 88fb is buggy, dev hsr_slave_1 [ 386.642544] protocol 88fb is buggy, dev hsr_slave_0 [ 386.648285] protocol 88fb is buggy, dev hsr_slave_1 21:45:45 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x27, 0x0) 21:45:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x800000000002) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) [ 386.812910] protocol 88fb is buggy, dev hsr_slave_0 [ 386.818750] protocol 88fb is buggy, dev hsr_slave_1 21:45:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x800000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 21:45:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x80009) 21:45:46 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x27, 0x0) 21:45:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000440)=""/8, &(0x7f0000000040)=0x8) 21:45:46 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/14, 0x7) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000280)=0xfdfdffff) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)) 21:45:46 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:45:46 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x27, 0x0) 21:45:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x201, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x2}}]}, 0x20}}, 0x0) 21:45:46 executing program 0: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)) 21:45:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740000, 0xf7ffffff7ff0bdbe}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550d, &(0x7f0000000000)) [ 388.085877] vhci_hcd: invalid port number 255 [ 388.090650] vhci_hcd: default hub control req: feff vffff i00ff l65535 21:45:47 executing program 0: setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x32, 0xffffffffffffffff, 0x0) [ 388.127172] vhci_hcd: invalid port number 255 [ 388.131880] vhci_hcd: default hub control req: feff vffff i00ff l65535 21:45:47 executing program 1: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x13, 0x0, {0x0, 0x0, 0x6}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='u\x856\xf9;\x82V\xc0\x00\xc7i\xdc7\xb7;\x9c\x17\x04!\xb5\x98\x83\xf6e\x173\xbb\x00\'\xbe\x00\x00\x00\x00\xaaB\xe0\x06K\x14\x80\x00\x00\x004\xbeg\x19\xe2$\xfa\xa4PY\n\xce\xd0+_\xfd\x114\xbb0*\xc9\x81\x96\x89\x1d\xd4CV\x02H\xd1,9\x18s\xbf\t\xf6\xcb\\-\x8b~\xde7\x89\x10E\x8e\x81\x88\x17S;\xf6\x01e\xcb\xc5k\xb8\xc2\x94J\x1f\xcf\x0e^!\'\x11\x92_xg\r\xd54\xf2\x83\'Q\xdc\xd4\xc6\xff\xabd\xb2wd\xdd\xf4\x83\xe2o($-\x1dn\xe4E,[\xd2dy\x8f\xe2:\xc9\x9d#@\xf2i\xfeQ\x05O', 0x0) write(r1, &(0x7f0000000040)="ec5fcdf9", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 21:45:47 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) unshare(0x20800) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000002) 21:45:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f000000000000032000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:45:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/14, 0x7) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000280)=0xfdfdffff) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)) [ 388.307439] mmap: syz-executor.0 (13322): VmData 35180544 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 388.525850] mmap: syz-executor.3 (13339) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 21:45:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000001c0)=""/184, &(0x7f0000000280)=0xb8) 21:45:47 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x80) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x494, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d3c3a12eb9a5a4e3"}}, 0x48}}, 0x0) 21:45:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) 21:45:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x3) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) 21:45:48 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) 21:45:48 executing program 5: r0 = socket$kcm(0x11, 0x20000040000000a, 0x300) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000004740)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x0, @local, 0x9}, 0x80, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(r0, &(0x7f000000c240)={&(0x7f000000b0c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, 0x0}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr\x00\x00\x00\x01.\x00N\x97\x81\x00\x00\x00\x02\x00', 0x213}) 21:45:48 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000800000000080008000100000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:48 executing program 2: rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') ftruncate(r0, 0x1fffc00000000000) 21:45:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1f0000001e0007f1fff5ff0200000000000000040000dd00000003728d0417", 0x1f) [ 389.676137] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:49 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETVAL(r0, 0xffffffffffffffc, 0x10, 0x0) 21:45:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x2f}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 21:45:49 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000fffffffe) utimes(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={{0x0, 0x7530}}) 21:45:49 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002000000fe8000000000000000010001000000000e000000c4abaa4c"], 0x28}, 0x0) 21:45:49 executing program 1: clone(0x3302001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1d, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:45:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr, 0x1}, 0x20) [ 390.337471] can: request_module (can-proto-0) failed. 21:45:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x51, r0, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) 21:45:49 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x20400) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0xffffffffffffffff) 21:45:49 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3}) [ 390.507203] can: request_module (can-proto-0) failed. 21:45:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newspdinfo={0xe9c, 0x24, 0x301, 0x0, 0x0, 0x0, [@sec_ctx={0xe6c, 0x8, {0xe65, 0x8, 0x0, 0x0, 0xe5d, "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"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x0, 0x0, @in=@remote}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) [ 390.602806] binder: 13420:13421 ioctl c0306201 20a20000 returned -14 21:45:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr, 0x1}, 0x20) [ 390.722424] net_ratelimit: 18 callbacks suppressed [ 390.722445] protocol 88fb is buggy, dev hsr_slave_0 [ 390.733213] protocol 88fb is buggy, dev hsr_slave_1 [ 390.812592] protocol 88fb is buggy, dev hsr_slave_0 [ 390.818291] protocol 88fb is buggy, dev hsr_slave_1 21:45:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1) 21:45:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr, 0x1}, 0x20) 21:45:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x51, r0, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) [ 390.962645] protocol 88fb is buggy, dev hsr_slave_0 [ 390.968444] protocol 88fb is buggy, dev hsr_slave_1 [ 391.142295] binder: 13445:13450 ioctl c0306201 20a20000 returned -14 [ 391.202662] protocol 88fb is buggy, dev hsr_slave_0 [ 391.208527] protocol 88fb is buggy, dev hsr_slave_1 21:45:50 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000fffffffe) utimes(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={{0x0, 0x7530}}) 21:45:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 21:45:50 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x400007) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x20000000) 21:45:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1) 21:45:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr, 0x1}, 0x20) 21:45:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x51, r0, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) [ 391.469113] binder: 13464:13468 ioctl c0306201 20a20000 returned -14 21:45:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1) 21:45:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000002380)=""/4096, 0x155c) 21:45:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x51, r0, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) [ 391.602630] protocol 88fb is buggy, dev hsr_slave_0 [ 391.608626] protocol 88fb is buggy, dev hsr_slave_1 21:45:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c8b1, 0xffffffffffffffff, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10}, 0x10) 21:45:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@bridge_getlink={0x34, 0x12, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x34}}, 0x0) [ 391.890145] binder: 13477:13478 ioctl c0306201 20a20000 returned -14 21:45:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) setsockopt$inet_mreqn(r1, 0x0, 0x13, &(0x7f00000000c0)={@broadcast, @local}, 0x154) 21:45:51 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000fffffffe) utimes(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={{0x0, 0x7530}}) 21:45:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x523, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x1ff) recvmmsg(r0, &(0x7f000030efc4)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:45:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1) 21:45:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x6, 0xfffffffffffffffe}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 21:45:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@bridge_getlink={0x34, 0x12, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x34}}, 0x0) 21:45:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:45:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:45:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000ac0)=""/124, 0x7c}], 0x3, 0x0, 0x120, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@bridge_getlink={0x34, 0x12, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x34}}, 0x0) 21:45:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000180)={'bond0\x00', @ifru_map={0x10001}}) 21:45:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@bridge_getlink={0x34, 0x12, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x34}}, 0x0) 21:45:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) 21:45:52 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000fffffffe) utimes(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)={{0x0, 0x7530}}) 21:45:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000ac0)=""/124, 0x7c}], 0x3, 0x0, 0x120, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:52 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000ec"], 0xc}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x4000)=nil, 0x0) 21:45:52 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000280)="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", 0xfc) 21:45:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) ioctl$TUNSETPERSIST(r0, 0x400454dc, 0x0) [ 393.587486] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. 21:45:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) open(&(0x7f0000000040)='./file0/file0\x00', 0x40, 0x0) 21:45:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000001500)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x77359400}}) 21:45:54 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x10}}, 0x14}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 21:45:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000002000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200) connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000140)={0x25, 0xfffffffffffffffe, 0x2, 0xff}) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:45:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000ac0)=""/124, 0x7c}], 0x3, 0x0, 0x120, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000003d80), 0x14) 21:45:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 21:45:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00') getdents64(r0, 0x0, 0x0) 21:45:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1a) 21:45:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000100), 0xfffffe05) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21:45:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000ac0)=""/124, 0x7c}], 0x3, 0x0, 0x120, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:45:54 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/67, 0x43}], 0x2) 21:45:54 executing program 4: unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7) [ 395.670772] dlm: non-version read from control device 67 21:45:54 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x980901}) [ 395.762524] net_ratelimit: 22 callbacks suppressed [ 395.762549] protocol 88fb is buggy, dev hsr_slave_0 [ 395.773321] protocol 88fb is buggy, dev hsr_slave_1 21:45:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000780)='veth0_to_bond\x00', 0x23a) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 21:45:54 executing program 2: r0 = socket(0x2, 0x10000000080805, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x80000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000002}) shutdown(r0, 0x1) shutdown(r0, 0x0) 21:45:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x29) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x1fc, 0x0) 21:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x439, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) 21:45:55 executing program 3: unshare(0x40600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 21:45:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x14000000}) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) preadv(r0, &(0x7f0000000080), 0x8, 0x0) 21:45:55 executing program 5: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) [ 396.321171] [drm:drm_calc_timestamping_constants] *ERROR* crtc 31: Can't calculate constants, dotclock = 0! 21:45:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1b, 0x80, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'W\x00th0_to_bridge\x00'}) ioctl$int_in(r0, 0x5473, &(0x7f0000000280)=0xc7b) 21:45:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xde}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r1, &(0x7f00000017c0), 0x324, 0x0) [ 396.483584] protocol 88fb is buggy, dev hsr_slave_0 [ 396.490517] protocol 88fb is buggy, dev hsr_slave_1 21:45:55 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) close(r0) 21:45:55 executing program 3: unshare(0x4000400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 21:45:55 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semtimedop(r0, &(0x7f0000000100)=[{0x3, 0x4, 0x1000}, {0x1, 0x4, 0x800}, {0x0, 0x233a3238}], 0x3, &(0x7f0000000140)={0x0, 0x1c9c380}) [ 396.972701] protocol 88fb is buggy, dev hsr_slave_0 [ 396.978571] protocol 88fb is buggy, dev hsr_slave_1 21:45:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xde}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r1, &(0x7f00000017c0), 0x324, 0x0) [ 397.052567] protocol 88fb is buggy, dev hsr_slave_0 [ 397.058354] protocol 88fb is buggy, dev hsr_slave_1 21:45:56 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x29) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x1fc, 0x0) 21:45:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6c00}) [ 397.210393] protocol 88fb is buggy, dev hsr_slave_0 [ 397.215948] protocol 88fb is buggy, dev hsr_slave_1 21:45:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000018c0)}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x195, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:45:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xde}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r1, &(0x7f00000017c0), 0x324, 0x0) 21:45:56 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x29) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x1fc, 0x0) 21:45:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000000)={'bond0\x00\x00\x00?\x00', @ifru_names='bond_slave_1\x00'}) 21:45:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) 21:45:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2d2) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) close(0xffffffffffffffff) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) 21:45:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffff9e}}}, 0xb8}}, 0x0) 21:45:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xde}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') preadv(r1, &(0x7f00000017c0), 0x324, 0x0) 21:45:57 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/2, 0x2}], 0x2) 21:45:57 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/41, 0x29) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x1fc, 0x0) 21:45:57 executing program 5: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x78}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) [ 398.786975] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.794326] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.801193] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.808167] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.815087] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.821968] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.828922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.835809] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.843163] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.850015] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 398.856991] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 21:45:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:45:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1000, 0x0, @loopback}, r2}}, 0x30) 21:45:58 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580), &(0x7f00000005c0), 0x8) [ 399.205478] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 399.332682] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.335813] input: syz0 as /devices/virtual/input/input7 [ 399.339636] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.352008] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.358852] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.365941] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.372860] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.379706] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.386688] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.393585] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.400414] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 399.407299] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 21:45:58 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'changeprofile ', 'sha512\x00'}, 0x15) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) [ 399.648838] input: syz0 as /devices/virtual/input/input8 21:45:58 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5527, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:45:58 executing program 4: syz_emit_ethernet(0x207843, &(0x7f0000000000)={@local, @empty=[0x2], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300008, 0x0, 0x0, @ipv4={[0x207835, 0x0, 0x28, 0x0, 0x2], [], @multicast2}, @mcast2={0xff, 0x4, [0x0, 0x0, 0x543]}, {[], @icmpv6=@time_exceed={0x2b, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 400.008165] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 21:45:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:45:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:45:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000700)={'bond_slave_0\x00', @ifru_settings={0x0, 0x8, @fr_pvc_info=0x0}}) 21:45:59 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mbind(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x4003, &(0x7f0000000040)=0x9, 0x7, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 400.396888] input: syz0 as /devices/virtual/input/input9 21:45:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0x10c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x14) [ 400.537714] input: syz0 as /devices/virtual/input/input10 21:45:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) readv(r0, &(0x7f0000006400)=[{&(0x7f0000001740)=""/23, 0x17}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000500)="0adc1f023c123f3188a070") r2 = syz_open_pts(r0, 0x2) dup3(r2, r0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x3}) write$binfmt_misc(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='s'], 0x1) 21:46:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:46:00 executing program 4: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f0000000300), 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0xfffffffffffffffe}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) splice(r1, &(0x7f0000000000), r0, 0x0, 0x5, 0x0) [ 401.103269] input: syz0 as /devices/virtual/input/input11 [ 401.122809] net_ratelimit: 18 callbacks suppressed [ 401.122838] protocol 88fb is buggy, dev hsr_slave_0 [ 401.133612] protocol 88fb is buggy, dev hsr_slave_1 21:46:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 401.202331] protocol 88fb is buggy, dev hsr_slave_0 [ 401.207932] protocol 88fb is buggy, dev hsr_slave_1 21:46:00 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'changeprofile ', 'sha512\x00'}, 0x15) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) [ 401.372523] protocol 88fb is buggy, dev hsr_slave_0 [ 401.378293] protocol 88fb is buggy, dev hsr_slave_1 21:46:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000640)="fc00000048000700ab092500090007000aab0800000000000000e29321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc000200ffffffff000000002fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c8b170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d25b0350b0041f0d48f6f0000080548deac270e33429f39d789445eb81d1f96577de8f5ba50da0e280df416d8c9cb475f53451eaf6aef391b3d3792dc43da441c3b4169ba9123c98fc60ad90cfc297b2eec841e51e0818a6fd20e159b1679b77d047f5b76ff65b70f6734dc624f89b517e74fc810ea37240635e06a309494bec743dc2ef6dc2af98e69420c0346a3e1ad61ed058d0c2575cd8be43ec51126cdd4fa1a8b8ff063ed11d021a8afcbdf6ce8893ffbde6bd7883501050eacad209319b883f527eaca43720fa332357016c91f78e2996d494aaf5fd7efb56ce233ed5924545b9d26723958c6359562c17fda14de95830b64cc535371c6d353d46e3286aed7e1de", 0x1da) 21:46:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) pwrite64(r0, &(0x7f00000000c0)="94", 0x1, 0x0) [ 401.447039] input: syz0 as /devices/virtual/input/input12 21:46:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 401.602402] protocol 88fb is buggy, dev hsr_slave_0 [ 401.608064] protocol 88fb is buggy, dev hsr_slave_1 21:46:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 21:46:00 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3ae40a52"}, 0x0, 0x0, @planes=&(0x7f0000000040)={0x0, 0x0, @fd=0xffffffffffffff9c}, 0x4}) [ 401.869095] input: syz0 as /devices/virtual/input/input13 21:46:01 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) unshare(0x20400) setsockopt(r0, 0x20000100000114, 0x0, &(0x7f00003cbffc), 0x0) [ 402.002318] protocol 88fb is buggy, dev hsr_slave_0 [ 402.008141] protocol 88fb is buggy, dev hsr_slave_1 21:46:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:46:01 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x100323, 0x1}) ioctl$FITRIM(r0, 0x4004550c, 0x0) ioctl$VT_RELDISP(r0, 0x5605) [ 402.243911] input: syz0 as /devices/virtual/input/input14 21:46:01 executing program 1: r0 = eventfd(0x0) readv(r0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000001580)=""/175, 0xaf}], 0x2) 21:46:01 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x201, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000000000) 21:46:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x2}}) 21:46:01 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'changeprofile ', 'sha512\x00'}, 0x15) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 21:46:01 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8982, 0x0) 21:46:01 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) 21:46:01 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x2}}) 21:46:01 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{}]}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x120, 0x0, 0x0, &(0x7f00000000c0)=""/81, 0xfffffffffffffe35}, 0x400020fe) 21:46:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0xd88) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x100050, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) 21:46:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xffffffffbfffbfbf, 0x0) 21:46:02 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{}]}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x120, 0x0, 0x0, &(0x7f00000000c0)=""/81, 0xfffffffffffffe35}, 0x400020fe) 21:46:02 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x100323, 0x1}) ioctl$FITRIM(r0, 0x4004550c, 0x0) ioctl$VT_RELDISP(r0, 0x5605) 21:46:02 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x2}}) 21:46:02 executing program 1: r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, 0x0}, 0x0) close(r0) 21:46:02 executing program 0: clone(0x280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:46:02 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) write$apparmor_current(r1, &(0x7f00000000c0)=@profile={'changeprofile ', 'sha512\x00'}, 0x15) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 21:46:02 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{}]}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x120, 0x0, 0x0, &(0x7f00000000c0)=""/81, 0xfffffffffffffe35}, 0x400020fe) 21:46:03 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x2}}) 21:46:03 executing program 1: r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, 0x0}, 0x0) close(r0) 21:46:03 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{}]}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x120, 0x0, 0x0, &(0x7f00000000c0)=""/81, 0xfffffffffffffe35}, 0x400020fe) 21:46:03 executing program 0: clone(0x280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:46:03 executing program 1: r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, 0x0}, 0x0) close(r0) 21:46:03 executing program 3: clone(0x280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:46:03 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x100323, 0x1}) ioctl$FITRIM(r0, 0x4004550c, 0x0) ioctl$VT_RELDISP(r0, 0x5605) 21:46:03 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0385720, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [0xfffffffe]}) 21:46:03 executing program 1: r0 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, 0x0}, 0x0) close(r0) 21:46:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0xaaaaaaaaaaaae88, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:04 executing program 0: clone(0x280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:46:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000067, 0x0, [0x400, 0x0, 0x40000106]}) 21:46:04 executing program 1: prctl$PR_MCE_KILL(0x21, 0x0, 0x3) 21:46:04 executing program 3: clone(0x280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:46:04 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000040)) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2, 0x14, 0x0) 21:46:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) ioctl$TUNSETPERSIST(r1, 0x800454df, 0x709000) 21:46:04 executing program 2: mbind(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2, 0x0, 0x0, 0x0) 21:46:04 executing program 0: clone(0x280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:46:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x100323, 0x1}) ioctl$FITRIM(r0, 0x4004550c, 0x0) ioctl$VT_RELDISP(r0, 0x5605) 21:46:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0x0}}, 0x7) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 21:46:05 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000340), 0xb7) [ 406.163906] net_ratelimit: 22 callbacks suppressed [ 406.163926] protocol 88fb is buggy, dev hsr_slave_0 [ 406.174711] protocol 88fb is buggy, dev hsr_slave_1 21:46:05 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000240)) 21:46:05 executing program 3: clone(0x280000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:46:05 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2842, 0x0) r1 = memfd_create(&(0x7f0000000040)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\"\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xb8+LO\x8d', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18}, 0xffffff4a) sendfile(r0, r1, &(0x7f0000000000), 0x18) 21:46:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x1004e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x99, 0xfea9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0xfffffdb6, 0x20048045, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 21:46:05 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d7", 0x1, 0x40, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9}, 0x8) close(r0) [ 406.649293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:46:05 executing program 0: socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) sendmsg(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) close(r1) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) close(r2) 21:46:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf4, 0x0, &(0x7f0000000000)=0x2c9) [ 406.882706] protocol 88fb is buggy, dev hsr_slave_0 [ 406.888435] protocol 88fb is buggy, dev hsr_slave_1 21:46:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x1004e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x99, 0xfea9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0xfffffdb6, 0x20048045, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 21:46:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d7", 0x1, 0x40, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9}, 0x8) close(r0) 21:46:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "58244c9a"}, 0x0, 0x0, @userptr, 0x4}) 21:46:06 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 21:46:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf4, 0x0, &(0x7f0000000000)=0x2c9) 21:46:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d7", 0x1, 0x40, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9}, 0x8) close(r0) [ 407.362798] protocol 88fb is buggy, dev hsr_slave_0 [ 407.368589] protocol 88fb is buggy, dev hsr_slave_1 21:46:06 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) [ 407.444843] protocol 88fb is buggy, dev hsr_slave_0 [ 407.450674] protocol 88fb is buggy, dev hsr_slave_1 [ 407.612445] protocol 88fb is buggy, dev hsr_slave_0 [ 407.618199] protocol 88fb is buggy, dev hsr_slave_1 21:46:06 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2842, 0x0) r1 = memfd_create(&(0x7f0000000040)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\"\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xb8+LO\x8d', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18}, 0xffffff4a) sendfile(r0, r1, &(0x7f0000000000), 0x18) 21:46:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x1004e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x99, 0xfea9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0xfffffdb6, 0x20048045, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 21:46:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r1, 0x2000) 21:46:06 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 21:46:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf4, 0x0, &(0x7f0000000000)=0x2c9) 21:46:06 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d7", 0x1, 0x40, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9}, 0x8) close(r0) 21:46:07 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 21:46:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf4, 0x0, &(0x7f0000000000)=0x2c9) 21:46:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r1, 0x2000) 21:46:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x1004e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x99, 0xfea9) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0xfffffdb6, 0x20048045, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 21:46:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r1, 0x2000) 21:46:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r1, 0x2000) 21:46:07 executing program 3: unshare(0x20400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000080)) 21:46:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/212, 0xd4}], 0x1) 21:46:07 executing program 5: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_stats}) 21:46:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r1, 0x2000) 21:46:07 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2842, 0x0) r1 = memfd_create(&(0x7f0000000040)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\"\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xb8+LO\x8d', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18}, 0xffffff4a) sendfile(r0, r1, &(0x7f0000000000), 0x18) 21:46:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r1, 0x2000) 21:46:08 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x200) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 21:46:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r1, 0x2000) 21:46:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xca) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x1000) 21:46:08 executing program 5: clock_getres(0xfffffffffffffffd, 0x0) 21:46:08 executing program 1: unshare(0x400) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140), 0x4) 21:46:08 executing program 0: mq_unlink(0x0) 21:46:09 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2842, 0x0) r1 = memfd_create(&(0x7f0000000040)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\"\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xb8+LO\x8d', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18}, 0xffffff4a) sendfile(r0, r1, &(0x7f0000000000), 0x18) 21:46:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x1d, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x15}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 21:46:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r0, 0x0, 0x0) 21:46:09 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x200) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 21:46:09 executing program 1: syz_emit_ethernet(0x92, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "9278ce", 0x5c, 0x0, 0x0, @ipv4={[], [], @remote}, @ipv4={[], [], @empty}, {[@hopopts={0x0, 0x2, [], [@generic={0x7, 0xa, "6dd8a854700914839af3"}, @ra]}], @gre}}}}}, 0x0) 21:46:09 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0, 0xff09}, {&(0x7f0000000380)=""/197, 0xfffffffffffffec8}], 0x1, 0x0) [ 410.036594] Enabling of bearer rejected, failed to enable media 21:46:09 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001}, 0x15) [ 410.076998] Enabling of bearer rejected, failed to enable media 21:46:09 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) read(r0, &(0x7f0000000400)=""/70, 0x413) unshare(0x400) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) 21:46:09 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x1, 0x5, 0xffff}) 21:46:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x5, 0x529, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x0, 0x77fffb, 0x0, 0x820003, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000280)="1e"}, 0x10) 21:46:09 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x200) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 21:46:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffffffffffc}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 21:46:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 21:46:09 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, &(0x7f0000000000)) 21:46:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x82, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) shutdown(r0, 0x1) 21:46:09 executing program 3: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x200) pipe(&(0x7f0000b79ff8)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00004f6ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e9eff4)={0xffffffff80000005}) 21:46:09 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x8081, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0x49446b49}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x3}, 0x2) 21:46:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x217) r2 = dup2(r1, r0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) 21:46:10 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4140, &(0x7f0000001f64)) 21:46:10 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) read(r0, &(0x7f0000000400)=""/70, 0x413) unshare(0x400) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) 21:46:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x0, 0x2}) 21:46:10 executing program 1: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 21:46:10 executing program 3: mmap(&(0x7f0000a92000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000a90000/0x4000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{0x0}], 0x1, 0x0) [ 411.522954] net_ratelimit: 18 callbacks suppressed [ 411.522975] protocol 88fb is buggy, dev hsr_slave_0 [ 411.533819] protocol 88fb is buggy, dev hsr_slave_1 21:46:10 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x9, 0x4) connect$inet6(r0, &(0x7f0000032fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0xfffffff5, &(0x7f0000019fa0), 0x1f2, &(0x7f000001ef08)}, 0x0) [ 411.612701] protocol 88fb is buggy, dev hsr_slave_0 [ 411.618586] protocol 88fb is buggy, dev hsr_slave_1 21:46:10 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) [ 411.772883] protocol 88fb is buggy, dev hsr_slave_0 [ 411.778735] protocol 88fb is buggy, dev hsr_slave_1 21:46:10 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000012000)) 21:46:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:46:11 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x800) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) read$eventfd(r2, &(0x7f0000000100), 0x8) read(r2, &(0x7f0000000040)=""/113, 0x71) close(r1) [ 412.002882] protocol 88fb is buggy, dev hsr_slave_0 [ 412.008660] protocol 88fb is buggy, dev hsr_slave_1 [ 412.225962] kvm: pic: non byte write [ 412.235347] kvm: pic: non byte write [ 412.246926] kvm: pic: non byte write [ 412.251282] kvm: pic: non byte write [ 412.256711] kvm: pic: non byte write [ 412.260975] kvm: pic: non byte write [ 412.266426] kvm: pic: non byte write [ 412.270805] kvm: pic: non byte write [ 412.276538] kvm: pic: non byte write [ 412.281022] kvm: pic: non byte write 21:46:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [0x200004b564d01, 0x7f]}) 21:46:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 21:46:11 executing program 1: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000040)) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) 21:46:11 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) read(r0, &(0x7f0000000400)=""/70, 0x413) unshare(0x400) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) [ 412.402524] protocol 88fb is buggy, dev hsr_slave_0 [ 412.408237] protocol 88fb is buggy, dev hsr_slave_1 21:46:11 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x4, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}], 0x1c) 21:46:11 executing program 1: unshare(0x20400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0}, 0x18) 21:46:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000000)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000000180), 0x0) 21:46:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) read(r1, &(0x7f00000002c0)=""/84, 0x54) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x1000) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 21:46:11 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000200)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}, 0x8800) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002c40)=""/4096, 0xff4b}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x154, &(0x7f00000003c0), 0x18, &(0x7f0000002880)}, 0x0) 21:46:11 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'dummy0\x00'}, 0x18) 21:46:12 executing program 5: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="13", 0x1}], 0x1, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) read(r1, &(0x7f0000001180)=""/4096, 0x1000) dup2(r2, r3) 21:46:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfdfffffffffffffe, 0x8072, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ea000/0x200000)=nil, 0x200000, 0x3000007, 0x8d471, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 21:46:12 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'dummy0\x00'}, 0x18) 21:46:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb90453c8650407007400000000fb120003003200000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 21:46:12 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) read(r0, &(0x7f0000000400)=""/70, 0x413) unshare(0x400) signalfd4(r0, &(0x7f0000000040), 0x8, 0x0) [ 413.403802] netlink: 'syz-executor.0': attribute type 116 has an invalid length. [ 413.411599] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 21:46:12 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'dummy0\x00'}, 0x18) 21:46:12 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000280)="c758a632b83678005dfcffffffffffff4ac485b35cbdefb03d08b66f69a6bec1eb15897f00000000000000010001007321ebe27263f8895eff47d420310a0e50ea087fd869") 21:46:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) read(r1, &(0x7f00000002c0)=""/84, 0x54) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x1000) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 21:46:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:46:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) 21:46:12 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'dummy0\x00'}, 0x18) 21:46:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) read(r1, &(0x7f00000002c0)=""/84, 0x54) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x1000) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 21:46:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x9, @win={{0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 21:46:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfdfffffffffffffe, 0x8072, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ea000/0x200000)=nil, 0x200000, 0x3000007, 0x8d471, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 21:46:13 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_setup(0x1f, &(0x7f0000000180)=0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000001380)={0x0, 0x0, 0xfeffffffffffff, 0x0, 0x0, r0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 21:46:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 21:46:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x1ff}}) 21:46:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) read(r1, &(0x7f00000002c0)=""/84, 0x54) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x1000) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 21:46:13 executing program 0: r0 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x4, 0x40000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3fff80000000, @local, 0x7}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r1, &(0x7f0000dc9ff0)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x20000000, 0x0, 0x0) sendto$inet(r1, &(0x7f00000001c0), 0xc8e6, 0x4000000, 0x0, 0xfffffed4) 21:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:46:14 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 21:46:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) chdir(&(0x7f0000000480)='./file0\x00') write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0x3}, 0x10) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:46:14 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200800, 0x0) inotify_add_watch(r0, 0x0, 0x5000008) 21:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:46:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:46:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfdfffffffffffffe, 0x8072, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ea000/0x200000)=nil, 0x200000, 0x3000007, 0x8d471, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 21:46:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:46:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x1ff}}) 21:46:14 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x10040, 0x0) 21:46:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:46:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:46:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000380)="690b9c113ad646320c9ab32fa79574c7655d9ad8", 0x14, 0x4850, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 21:46:15 executing program 5: unshare(0x24020400) r0 = inotify_init1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 21:46:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40000000048, &(0x7f00009f5ffc)=0xdc, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000000c0)=0x16b) [ 416.562814] net_ratelimit: 22 callbacks suppressed [ 416.562834] protocol 88fb is buggy, dev hsr_slave_0 [ 416.573625] protocol 88fb is buggy, dev hsr_slave_1 21:46:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000380)="690b9c113ad646320c9ab32fa79574c7655d9ad8", 0x14, 0x4850, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 21:46:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x70, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x50, 0x2b, [@IFLA_XDP_FD={0x4c, 0x1, {0x3f000000, 0x0, 0x0, 0x0}}]}]}, 0x70}}, 0x0) [ 416.760575] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 416.835137] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 21:46:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfdfffffffffffffe, 0x8072, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ea000/0x200000)=nil, 0x200000, 0x3000007, 0x8d471, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 21:46:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x1ff}}) 21:46:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) 21:46:16 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x24, &(0x7f0000013e95), 0x4) close(r0) 21:46:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000380)="690b9c113ad646320c9ab32fa79574c7655d9ad8", 0x14, 0x4850, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 21:46:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x0, 0x40000105]}) 21:46:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000380)="690b9c113ad646320c9ab32fa79574c7655d9ad8", 0x14, 0x4850, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 21:46:16 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[]}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmsg(r0, &(0x7f0000004b40)={&(0x7f0000000080)=@l2, 0xfe65, &(0x7f0000004b00)}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x810, 0x4) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 417.282465] protocol 88fb is buggy, dev hsr_slave_0 [ 417.288202] protocol 88fb is buggy, dev hsr_slave_1 21:46:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x69, 0x0, 0x0, 0x1}, 0xf) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 21:46:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x0, 0x40000105]}) 21:46:16 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f00003ccff8)=0x10003, 0x7742) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 21:46:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r1, 0x0) shutdown(r0, 0x0) [ 417.762625] protocol 88fb is buggy, dev hsr_slave_0 [ 417.768315] protocol 88fb is buggy, dev hsr_slave_1 [ 417.842865] protocol 88fb is buggy, dev hsr_slave_0 [ 417.848679] protocol 88fb is buggy, dev hsr_slave_1 [ 418.012470] protocol 88fb is buggy, dev hsr_slave_0 [ 418.018194] protocol 88fb is buggy, dev hsr_slave_1 21:46:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x69, 0x0, 0x0, 0x1}, 0xf) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 21:46:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x0, 0x40000105]}) 21:46:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x1ff}}) 21:46:17 executing program 4: unshare(0x2000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, 0x10) 21:46:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0x280, 0x168, 0x0, @stepwise}) 21:46:17 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000680)={&(0x7f0000000a00)={0x24, 0x2e, 0x109, 0x0, 0x0, {}, [@nested={0x10, 0x0, [@typed={0x4, 0x0, @binary}, @typed={0x8, 0x0, @uid}]}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:46:17 executing program 0: clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x9) 21:46:17 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 21:46:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x0, 0x40000105]}) 21:46:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2400, 0x0) close(r1) 21:46:17 executing program 0: clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x9) 21:46:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x69, 0x0, 0x0, 0x1}, 0xf) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 21:46:18 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r2 = accept(r0, 0x0, 0x0) close(r2) close(r1) 21:46:18 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400c2ad8c0d386b500800", 0xe}], 0x1}, 0x0) 21:46:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x6e0}]}) 21:46:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x13, 0x4) 21:46:18 executing program 0: clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x9) 21:46:18 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x400000000008, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, {0x3014}}) 21:46:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00\xbf\x881\x88\b\x00\x02\x7f\x1fx\x02\xac\xb0\t\xf8\xadKqC\x066\x9e\xb4\xcf\x1cv\x89\x8b\x15L\x14\x1f^\x86\x98\xaf\xb1\xebY+\xe4\xbd\xa6\x13\xfeK\x87\xaf\xb3u%\xb66\x04\a\x9fgB\x13W\x15\xf6\xfe3\f\x1f\bt`\xef\xd9)\x82\xad\xfb\xf6\xb4B\x0e\x01\\\xc7\xf0\xa1\x89\xf41`J0x\xb32j\xf0\xea\xe9\x8c\x05\xf9u\xde\xc0Z\x80<\x85\\>3\xcb\x94\xd5\n\x90\xf2\xbd\xfc\xf69\xaa\xcc]s\xa9G\fC;=\n63[$\xc9\x80\x00\x00\x00\xb2\x9e\x87=\xc9\x99w\xe4O\xbaf#~O2\x8dU\x17\x9f~\xb5\x8c\xa28\b\x00\x00\x00\xd5\x8e\x83v\x10]N;\x00\x00\x00\x00\x00\x00\x00') faccessat(r0, &(0x7f00000000c0)='.\x00', 0x400000002, 0x0) 21:46:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x69, 0x0, 0x0, 0x1}, 0xf) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x87}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 21:46:18 executing program 3: mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r1 = open$dir(&(0x7f0000001fc0)='./file0\x00', 0x27e, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) close(r1) 21:46:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)='X\x00\x00\x00', 0x4}], 0x1) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 21:46:18 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0xb9, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 21:46:18 executing program 0: clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000380)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) tkill(r0, 0x9) 21:46:19 executing program 3: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 21:46:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)='X\x00\x00\x00', 0x4}], 0x1) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 21:46:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002800)="39000000100009e369001b00810800000700fd9816000011450001070000001419001a0004000a100f000200000809c99183a8a50002000000", 0x39}], 0x1) 21:46:19 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "146ee351a0b94fef6e71ba8de200"}) 21:46:19 executing program 1: socket$inet(0x2, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x2) 21:46:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02040609100000000000004c9e0000000100130002000000000000000000000105000600200000000a0000000000dfff000500e50000070000001f000000000000030000002300000200010000000000000005000500000000000a00000000000000ff0000001700000000000000000000000000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000003, 0x0) 21:46:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)='X\x00\x00\x00', 0x4}], 0x1) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 21:46:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newrule={0x34, 0x20, 0x725, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) 21:46:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="ba0200000000000000e99f7b01adc2f2", 0x10}], 0x1}, 0x0) 21:46:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0xc0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="ea442048100c1f0857cce27dba5be370"}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 21:46:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)='X\x00\x00\x00', 0x4}], 0x1) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 21:46:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newrule={0x34, 0x20, 0x725, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) 21:46:20 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x10000012) unlink(&(0x7f0000000380)='./file0\x00') 21:46:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002001300faffffff000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000005000000000005000500000000000a00000000000000ff17000000000000000000154c0000000017000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) 21:46:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da15}, [@nested={0x18, 0x2a, [@typed={0x1500, 0x0, @ipv6=@mcast2={0xff, 0xe}}]}]}, 0x2c}}, 0x0) 21:46:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r2 = dup(r1) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r2, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 21:46:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newrule={0x34, 0x20, 0x725, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) [ 421.441461] input: syz1 as /devices/virtual/input/input19 21:46:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000530ff8)=0x4) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x431b844a) shutdown(r0, 0x0) 21:46:20 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2a) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x80000008) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x20000000) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r3) [ 421.551140] input: syz1 as /devices/virtual/input/input20 21:46:20 executing program 2: close(0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x200) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f041, 0x0, [], @p_u8=&(0x7f0000000080)}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x12}, {0xffffffffffffffff, 0x2080}, {0xffffffffffffffff, 0x208}, {0xffffffffffffffff, 0x200}, {r0, 0x404}, {0xffffffffffffffff, 0x100}, {r0, 0x8005}], 0x7, 0x0) 21:46:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x16}]}) 21:46:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newrule={0x34, 0x20, 0x725, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) [ 421.872476] vivid-000: disconnect 21:46:21 executing program 1: unshare(0x2000400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000000), 0x3cf) [ 421.922330] net_ratelimit: 18 callbacks suppressed [ 421.922351] protocol 88fb is buggy, dev hsr_slave_0 [ 421.933003] protocol 88fb is buggy, dev hsr_slave_1 21:46:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000530ff8)=0x4) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x431b844a) shutdown(r0, 0x0) 21:46:21 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) listen(r0, 0x0) [ 422.002407] protocol 88fb is buggy, dev hsr_slave_0 [ 422.008027] protocol 88fb is buggy, dev hsr_slave_1 [ 422.137067] vivid-000: reconnect 21:46:21 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000200)={&(0x7f0000000100), 0x8}) [ 422.172368] protocol 88fb is buggy, dev hsr_slave_0 [ 422.177998] protocol 88fb is buggy, dev hsr_slave_1 21:46:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbd1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x8001, 0x0, 0x0, 0x0, 0xd}, 0x98) 21:46:21 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\f') 21:46:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) [ 422.402577] protocol 88fb is buggy, dev hsr_slave_0 [ 422.408265] protocol 88fb is buggy, dev hsr_slave_1 [ 422.498682] libceph: bad option at ' ' 21:46:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x1d, 0x0, 0x2) 21:46:21 executing program 2: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000c80)={'\x00\x00\x01\x00\x00\x00\x00\x00\x80\x00'}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000140)=@hci, 0x80, 0x0}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x4, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:46:21 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\f') [ 422.571894] libceph: bad option at ' ' 21:46:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0xb13, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x0, "0f348062d210669ffac1d7300000000062b24d0a0e4065af6600faffffff00"}) [ 422.779115] libceph: bad option at ' ' [ 422.812876] protocol 88fb is buggy, dev hsr_slave_0 [ 422.818384] protocol 88fb is buggy, dev hsr_slave_1 21:46:21 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\f') 21:46:22 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\f') [ 423.041915] libceph: bad option at ' ' 21:46:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000530ff8)=0x4) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x431b844a) shutdown(r0, 0x0) 21:46:22 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x1000000, 0x0, &(0x7f0000000000)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df00ff000a00000000000000fe805306000000000000000002000000000000009dbb000002000100000000000400050d0000000005000500000000000a00000000000000ff0200000001040000000000000000010000000000000000"], 0x98}}, 0x0) 21:46:22 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000380)="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", 0xfc) 21:46:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}}, 0xf0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:46:22 executing program 2: unshare(0x2000400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) [ 423.340642] libceph: bad option at ' ' 21:46:22 executing program 0: unshare(0x20400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x0) [ 423.416008] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 21:46:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000530ff8)=0x4) listen(r0, 0x0) poll(&(0x7f0000f81000)=[{r0}], 0x1, 0x431b844a) shutdown(r0, 0x0) 21:46:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000001c0)={0x1, 0x1, @start}) 21:46:22 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2000000000000e9, &(0x7f0000000100), &(0x7f0000000040)=0x4) 21:46:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x4b564d02, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:22 executing program 0: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x4, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:46:23 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 21:46:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') io_setup(0x4, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0xf, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 21:46:23 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x1000000, 0x0, &(0x7f0000000000)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df00ff000a00000000000000fe805306000000000000000002000000000000009dbb000002000100000000000400050d0000000005000500000000000a00000000000000ff0200000001040000000000000000010000000000000000"], 0x98}}, 0x0) 21:46:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x1, 0x0) 21:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e723000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffffff0000e000000050010000880100007374700000000000000000000000000000000000000000000000000000000000480000000000000002000000020000000000ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffffff00004e234e21040071ac0600ff7f382803000500070000080100736e6174000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ffffffff0000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f74756e000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000000000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000010000000000000007000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000adcc"]}, 0x608) 21:46:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10) 21:46:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000980)=@updpolicy={0xc4, 0x19, 0x421, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc}]}, 0xc4}}, 0x0) 21:46:23 executing program 0: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x4, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:46:23 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x1000000, 0x0, &(0x7f0000000000)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df00ff000a00000000000000fe805306000000000000000002000000000000009dbb000002000100000000000400050d0000000005000500000000000a00000000000000ff0200000001040000000000000000010000000000000000"], 0x98}}, 0x0) [ 424.622785] x_tables: eb_tables: snat target: only valid in nat table, not nat 21:46:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000014f88)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 424.663746] x_tables: eb_tables: snat target: only valid in nat table, not nat 21:46:23 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000020c0)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f00000010c0)=""/4096, 0xfffffffffffffea7, 0x0, &(0x7f0000000080)={0x0, r1+10000000}) 21:46:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x1, 0x5, 0x3]}) 21:46:24 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)) 21:46:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x1000000, 0x0, &(0x7f0000000000)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df00ff000a00000000000000fe805306000000000000000002000000000000009dbb000002000100000000000400050d0000000005000500000000000a00000000000000ff0200000001040000000000000000010000000000000000"], 0x98}}, 0x0) 21:46:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 21:46:24 executing program 4: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 21:46:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x1d0, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'vlan0\x00', 'lo\x00', 'rose0\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x248) 21:46:24 executing program 0: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x4, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:46:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000e0ffffffffffffff0000000000000000df876fd2"], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 21:46:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x90, &(0x7f00000000c0), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'team_slav\x00', 'syzkaller0\x00', 'rose0\x00', @dev, [], @local, [], 0xb0, 0xb0, 0xe8, [@mark_m={'mark_m\x00', 0x18}]}}, @snat={'snat\x00', 0x10}}]}]}, 0x1f0) 21:46:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0x4008af03, &(0x7f0000000140)=0x10000080000001) 21:46:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 21:46:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 21:46:24 executing program 0: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000002040)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x4, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@mpls_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0xc, 0x1, [{}, {}]}]}, 0x28}}, 0x0) 21:46:24 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x8}) [ 425.973501] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:46:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 21:46:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 21:46:25 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000480)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc008561c, &(0x7f0000000180)={0xf0f000, 0x210}) 21:46:25 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80021, &(0x7f0000000200)='/selinux/avc/cache_stats\x00') 21:46:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 426.372110] devpts: called with bogus options [ 426.393101] devpts: called with bogus options 21:46:25 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x86000130) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000300)=""/4096, 0x1000) close(r0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 21:46:25 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x73) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 21:46:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 21:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 21:46:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) dup3(r0, r1, 0x0) open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0x0) 21:46:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 21:46:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 21:46:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00bW\xdc\xb1\x95\x87\xe2,\xael\xd4\xdf|p8\xb9\x833\xda-cf,\r\xaf8\xa7\xd5h\x12\xa6\xc5\xf6\xe3\x11\x19Y\r \xf0\x06E[\xa7\xadk\xc0\x9c\x1d\xf1\x94\xcc\xa2\"\x0f\x00:?\\u\x0e\xd8\xdf_4\xb58\x99\xc2W\n-\xcb\xd2\x00\x98\x05\xbb\x94\xf4u8\n\\~P%>\x84X\xb0o\x05\x16\x95\x91\x94\x15\x84\xdf\x81bK\x9f\x91\r=\x1e\x02K\x19\x82I\x00\xa0\xad:1b\xde\x02y\xe2\xf0\xd6\xbd\xc0\xd0\xe6I\xec\x18\xe8A\xf4\t\x97\xf5\xee\xd7\xc1\x82\x7f\xe56\xab\xfe\xf8Y\x84\x10\xe3\xd3M\x83\x80\xe7\xd2\'\xb1v\x8c\xc5\x9f\xf2\xd9\x05)\xf2\xfe\xbf\xf5 \x9f\xfe\xffK\xb2d\xd1hy\xfc\xd9\xe3Q\xd5e\x98f1\x15\xd4\xcc\xf2*G\x8ak_\b\x93U\x18L\xf1\xc2UB\xe1\xd8\xbd\x1fX\xdc\xd3\x8e\x95\x04|\x9b\t\x9b\xb7\x81\x1d&S\x82\x17\xe2\x1b\x18De\xb5\x06') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 426.962576] net_ratelimit: 22 callbacks suppressed [ 426.962595] protocol 88fb is buggy, dev hsr_slave_0 [ 426.973594] protocol 88fb is buggy, dev hsr_slave_1 21:46:26 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x70, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x3b4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2, 0x1}, 0x20) 21:46:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) dup3(r0, r1, 0x0) open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0x0) 21:46:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0x1e, 0x2, 0x0) r2 = socket(0x800000000000001e, 0x200000000000002, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) 21:46:26 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x8004745a, &(0x7f0000000180)) 21:46:26 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000380)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) 21:46:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 21:46:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) dup3(r0, r1, 0x0) open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0x0) 21:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 21:46:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x5, 0x4) bind$unix(r2, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 21:46:26 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@hopopts={0x0, 0x0, [], [@jumbo={0xc2, 0x4, 0x19}]}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) clone(0x80010000, &(0x7f00000001c0)="20ea07f10ba8e21c1937d004", 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'rose0\x00', 0x2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'y\xff\x03\x00k\x00', 0x1}) [ 427.682498] protocol 88fb is buggy, dev hsr_slave_0 [ 427.688313] protocol 88fb is buggy, dev hsr_slave_1 21:46:26 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010807441dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 21:46:27 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0x8, @pix_mp}) 21:46:27 executing program 4: syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f0000000280)=""/107, 0x6b, &(0x7f0000000200)={&(0x7f0000000100)={'rmd128\x00'}, &(0x7f0000000400)}) 21:46:27 executing program 5: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000500)=0x84) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x25c, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-256-generic\x00'}, &(0x7f00000001c0)}) 21:46:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) dup3(r0, r1, 0x0) open(&(0x7f0000000000)='./control\x00', 0xd40beb2474dfd227, 0x0) 21:46:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0xfe91) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x408c5333, &(0x7f0000000300)={0x0, 0x0, 'client0\x00', 0x0, "76145181b5e6de55", "bd4535e96a92c597e30c7bb48247e076e68021d56c2b9efc50d356f793bb76b5"}) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) [ 428.162604] protocol 88fb is buggy, dev hsr_slave_0 [ 428.168308] protocol 88fb is buggy, dev hsr_slave_1 [ 428.252786] protocol 88fb is buggy, dev hsr_slave_0 [ 428.258535] protocol 88fb is buggy, dev hsr_slave_1 21:46:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {}, [@NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x28}}, 0x0) 21:46:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="230000002600075e1dfffd726fa2830020200a0009000000000001a0f1ffffff0d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e639700000100000000006cf055d90f15a3", 0x4c}], 0x1}, 0x0) 21:46:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000000000), 0x80000002, 0x0) r1 = gettid() select(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2b) [ 428.402705] protocol 88fb is buggy, dev hsr_slave_0 [ 428.408639] protocol 88fb is buggy, dev hsr_slave_1 [ 428.567350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 21:46:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 21:46:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000000000), 0x80000002, 0x0) r1 = gettid() select(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2b) 21:46:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, 0x2, 0x1, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x12, [@typed={0x8, 0x0, @pid}]}]}, 0x20}}, 0x0) 21:46:27 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000000680)={0x8, "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", 0x1000}, 0x1006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), 0x8) 21:46:27 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x26, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) 21:46:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000000000), 0x80000002, 0x0) r1 = gettid() select(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2b) [ 428.978698] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 21:46:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20000000027, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000c33f70)={0x1, {{0x2, 0x0, @multicast2}}}, 0x90) close(r2) 21:46:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x52}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc)={0x0, 0x0, 0x3}, 0x4) 21:46:28 executing program 0: unshare(0x2000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vsock\x00', 0x2c0401, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, 0x0, 0x0) 21:46:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000000000), 0x80000002, 0x0) r1 = gettid() select(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2b) 21:46:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x3e1, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xb, 0x7}]}}}]}, 0x3c}}, 0x0) 21:46:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) [ 429.646603] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) 21:46:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) 21:46:28 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585605, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x15, 0xa, 0x0, "17606e0f2b5c34c9db5a0f9cc0fbda7643ed12de15d50361a077e48500"}) 21:46:28 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc020aa04, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000/0x1000)=nil, 0x2000}) 21:46:28 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[]], 0x8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:46:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3c) read(r0, &(0x7f0000000080)=""/77, 0x4d) dup3(r0, r1, 0x0) 21:46:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) 21:46:29 executing program 0: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000002100)) 21:46:29 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f00000001c0), r2, 0x0, 0x7, 0x0) 21:46:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) unshare(0x40020200) 21:46:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xa1cd, 0x1}) 21:46:29 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000603000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000600000/0x1000)=nil, 0x1000}) [ 430.399823] IPVS: ftp: loaded support on port[0] = 21 21:46:29 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b100485caa2a", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) [ 430.665331] IPVS: ftp: loaded support on port[0] = 21 21:46:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xa1cd, 0x1}) 21:46:30 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x5) 21:46:30 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000603000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000600000/0x1000)=nil, 0x1000}) 21:46:30 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b100485caa2a", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 21:46:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) unshare(0x40020200) 21:46:30 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) 21:46:30 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b100485caa2a", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 21:46:30 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000603000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000600000/0x1000)=nil, 0x1000}) 21:46:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xa1cd, 0x1}) 21:46:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000a000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 431.303148] IPVS: ftp: loaded support on port[0] = 21 21:46:30 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ae4000)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000603000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000600000/0x1000)=nil, 0x1000}) 21:46:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xa1cd, 0x1}) 21:46:30 executing program 5: r0 = socket$inet(0x2, 0x80003, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@random="b100485caa2a", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 21:46:30 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) 21:46:31 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) 21:46:31 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) unshare(0x40020200) 21:46:31 executing program 2: clock_adjtime(0x0, &(0x7f00000003c0)={0xd351}) 21:46:31 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 432.295714] IPVS: ftp: loaded support on port[0] = 21 [ 432.332592] net_ratelimit: 18 callbacks suppressed [ 432.332612] protocol 88fb is buggy, dev hsr_slave_0 [ 432.343428] protocol 88fb is buggy, dev hsr_slave_1 21:46:31 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000340)={0x11, 0x0, r1}, 0x14) r2 = dup2(r0, r0) write$uinput_user_dev(r2, &(0x7f0000000900)={'syz0\x00'}, 0x45c) [ 432.402447] protocol 88fb is buggy, dev hsr_slave_0 [ 432.408139] protocol 88fb is buggy, dev hsr_slave_1 21:46:31 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) 21:46:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x3, 0x600000000000000, [0x48], [0xc2]}) [ 432.562303] protocol 88fb is buggy, dev hsr_slave_0 [ 432.567885] protocol 88fb is buggy, dev hsr_slave_1 21:46:31 executing program 5: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) close(r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffffa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000021ff4)={0x2001}) [ 432.802370] protocol 88fb is buggy, dev hsr_slave_0 [ 432.808089] protocol 88fb is buggy, dev hsr_slave_1 21:46:31 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) 21:46:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'srusted.', '/dev/fuse\x00'}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:46:32 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) unshare(0x40020200) 21:46:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x3, 0x600000000000000, [0x48], [0xc2]}) [ 433.202457] protocol 88fb is buggy, dev hsr_slave_0 [ 433.208232] protocol 88fb is buggy, dev hsr_slave_1 [ 433.302890] IPVS: ftp: loaded support on port[0] = 21 21:46:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) 21:46:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x116a0}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 21:46:32 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r1+10000000}, &(0x7f0000000140), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @remote}}}, 0x30) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1) 21:46:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'srusted.', '/dev/fuse\x00'}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:46:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x3, 0x600000000000000, [0x48], [0xc2]}) 21:46:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x1d, &(0x7f0000b67000), &(0x7f00000000c0)=0x4) 21:46:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x3, 0x600000000000000, [0x48], [0xc2]}) 21:46:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'srusted.', '/dev/fuse\x00'}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:46:33 executing program 1: r0 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00', 0x1203}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xffffffffffffffff}) [ 434.582306] device bridge0 entered promiscuous mode 21:46:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x4000000032, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket(0x100000010, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8924, &(0x7f0000000000)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x1, 0x8, @fr_pvc=0x0}}) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x4, 0x4) 21:46:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x162, &(0x7f0000000000)=[@op={0x18}], 0x24}], 0x49249249249265b, 0x0) 21:46:33 executing program 5: clock_nanosleep(0x9, 0x0, &(0x7f00000001c0), 0x0) [ 434.604862] device bridge0 left promiscuous mode 21:46:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 434.720931] device bridge0 entered promiscuous mode 21:46:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'srusted.', '/dev/fuse\x00'}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:46:34 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="66b9ad0300000f320f01c8d926bd580f0054080f21ffba200066ed0f01cf0f30d9fe8e03", 0x24}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, 0x0) 21:46:34 executing program 2: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 21:46:34 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b2, &(0x7f0000000040)=0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 21:46:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400), 0x8) 21:46:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 21:46:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000e10b0000000000000000001e0700000006000000680793af4e"]) 21:46:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0xe7}}) 21:46:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:46:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="fb5c30c28201912354aafbf78985dc50", 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {}, [], "1316ad04d2d14b82e1b1f5023631b54254e2d12bf1c5f383f9ac4b864db910c7f30b050554315b0539fe3c54546d96a301b5ca7ae1527ee806c0b4e84b6dfbeac743554de70b843630046a11a7b0cdeb4abc45cb8b892760f8bc1da0299bb6ebefe04a2638975e3366c342db07ea083ebceadd16ce71ae8ebdd94a1f7211838887bb14e8c6164956889d856c1515e4c0ffed551038555b767b6f660f9f056f2965709c4c402f5578f8c13580459ac4ccf900352751f05b44e7e4f65bd1fb828fd4e9401276c36095017b352f3e3017cc9c3f10fb3d411b7911afad232797d0a871df7080aceffe11b9fdb406ecdb894955c32fed5715c7e5a8d0e15773424c530098813498caf7eee983e56c558433db0d881da3e88d554e94c9db954adf557e527be42f34758cab5e4638d706a49474153e908e91250b85b48f332c80ad00e32011301be45bd700d2f936eea4add960ee1026e641bca7a5c2bccba71ef4ca5eccff6737dbe88c70ebe0c2900cc515ba967e8252efd1a212bc50dca018a2ddf900c2067e33161d33250cca5ef93ba7c22c10ce8b9d674b661e9435a20fe30642fe4d09d049d914f9cc411187d75be89bd3e2b3339bc046bba9472f340a44f053776d71fb3d650d1b7791c6d6f4d75c818fd53d7e1c1d878ae7c8464b2c578e2394b1967e2bb00f933e48542f5479f424471616fcec2ea977b0e4e77ab94c8f06edd0895f3b9122c28918f55860c018e96b531e5f2fcf25ebe9d7831118af6de8f38c5d121497e96202a4707fe44c5d862dd400a2ecdabb50350d33528b67e3ce3370d61a37aefd77e3268d3f63d643061a49075f6e84f670fae730c70ba888ed779c15f8b88c3e8956b8bf02d9d3361e419d2b58fdce6c851d36660f491d8d09c59c83d6834ad6db11f8a5310eae46deafcb3de8d0b2ff23f3d9f516ccf4256e06825eb696219e7b6a89a5dc52ddcf50ff4319955a703a0cb5e9e13b228d46d77b1e08eccaf9f3ac7eec22371e1283ac3e5483406decf3cbf5c2b138e8785fe43ca4be049565740f276c345b6111188d11e9c2cfd387278b03a558f435c4a35a94e362572b42a7a238e5642d147e18880722f8db5096d609a67f73c653e350ecd2ab659423906427671e06c1412f7c092804889b532f11fb12b0c79716b4f4ce659d54ac92eaeb754ee914202d15b13891635d2e30ff93a648c57e0181af2a449e9c7e9f296572dff4df53854b3e839675943ffd860edad352314d09e12e52899a26cc60ce897acacc560e6db3de91a348562a15fb8fd08b6a442526df0e9266f0dfe62143a7b2d11d2ac899c3a555137e2c699f733dc761373631c3d01d3c9b50667af57ee7e125ec7779ee013847dd56fe70f7bd6c0bb0fd5b8d3ad9fc0c846f44d2b7568a1f19d8bf20ab738f3a8cf40b2f5c6ce0cb92a45c0f443f675316db1bba0ca8e880f3cd152c2f4f1e60763c4816fd1772fd51e968196f7204d28ff5781e36415eb24e9b6d56689db064e0c2102a82b2aa1a4befad6a3219d05310bbbf83b44b63c34f4366e01c110bd83be57b9941db3c629b593563ce6cbc1c9f091bc299bf52c11cbe3d1edec29a989597bcfbae6e4f515bb677f16c35b8277623d2a653957070dd77c3b131563fb47f5e9ac8b93a8adaafd8ffa89ad596acc4131e7062c3f907b3b1f88388fc2214adb0f83e54a63918adb84df1d4414b92ccaf9325212cb1c61d19f7380a97073c7e397bbf78c3ea6cff5c5387c30b8f410c79dad4f44294481da8a28c9be920dabb4fac2ca36955ae13f2cdd5eda099fe410e52c2c67d0a5b361c493962220fb8525af4b0157de2f436ddae504ebc95f6dc954434e1f70b1f7c3e0b9f3881f5b110e479b88b223429a8104da63fe0fd94a1848014bfe826ba41b82408cb43325d64fa7e8e563b73efc6f49b5b15e1b4656c1f47d3c58482de9a81be63784d854523c101f7122f955c689c310372c112866b41fd501f3ed276b87abc39339cb1c24f7bac6ef983a66b838e3f5bc7e64a0e1a1cb2475aa426ff2899ec1fd6af87cf3d27714da161579f4f792ff904372767b3492f9868ba18180c8d0cd33d12c5e20761ef91ac2f0784194f67011a39e991d6a405db8d013eb538556ac03aa29d328963a4efd0831220b261cdc86caa7b86cb9b36cd6f4b1c26cc3dbb679892f5ad7c6d77f23503456b936d4d0d0a7f5faa09b9d5e92efc5e08e0ae579d528703734cda053cf24e03bb1cd8cb4679348d792055b7300e16424d026731f81acf1a8988acb4dc80a0b4b95e9ec86948339749397fb48a363fbc66bcdb21cbaa33412ba2b53645eb3781d4c7029b2ed57c1f153b9be0383870e2e3f7d6f399a12226f3497b6b8003c9581e6665e5ef5203efc27e0efe60ba5d46f6afea6e5c6cd2be85f395b6f4229606c1595efcbb8c92cb26d859e90a0cf323735d8d970ebb9ecfbdfe6f45dd06b70b74ce847e7809f6393c05da0743261ca0e4fcdc0099575aee69ef706dbf1617dbee8d38fd0596d14e6145a8d406b2c98ac6d2aae455c48ebf2937c3da8a74a963c9df1a2f8fa9e425c25d1093991ee7c963848ba658a511bbdde385784dad19695d6434351aa9e1c810ec26aef97e86962064be65672f990f49c9cc825a9964c55640d03d1e98b4cd5c97db6f7a5a8bfbebd5a8d72a8c57eceaa32d30ca071933f2436b2c6f8740291dc0e7e9173cf656fe12d3a2d4afca2d30f9b4536c5b6d9a8af4447c32799eb7c777c9902b6829849ad78b6eb133846054bcfc9c559b2d4c0deb4a45833d20382ba43b697b78a575a04317c1740811d8efe8da50fc3aa24f8b108f910ad0ce253afefcc0641bd92dc4ef8bbdb114bbb989b7b14900c6cc8824733b37c87fa1680886a2b8c7633c1603877a58d3b41da08c89b7f575680968da3f01a4e98decf57372665b42458cc16f57ecee6da26ec62c234ca13fc9256be3b3ec8cc1918fa39282e960054febcea2b3cff470bd4613527391157e7c91a749813286d112ab20dbe5ff9af2a6b68a9193fc37d6b08e6149c90fcda57e9ff68f5822b6e1aaeb01f5a379175fc6662214a19a087ef78bb376f7c523db663fb272d7de1a1b093d444e86b1e562829dba9df2253d9701942840742ca611cb1de2e338a0f4b6e5cbcd9ad47187d394589308e80c15efb77f4bdae0db8054b3fa793da3de4697f12826138ac812886d1c8647610328322df6c16eb6697cc42e73f89429d57a10b4047d3798b611035e0dc2370ee198a39b3e275b9e3c96da5e69fe6f628335e466804479e573c102698b7dc667d7105f885da9f4e2b84362f951018ff3d564f764dcaacc072b90c75c6a0a68bfb485e31b80f89203efa8771d2ad95cdab1d48b420ba759fa4797c848075779f465884b60d1d4589fbf8a0e9b097f6aacc38ce0bad651be5a5da8eb8c47027b1afe7a5bf365c9e57a1cc6c47830c48648d6b5b160bf9c9f9ca6bfa262fd5f16313c4549b518870d1b080c7fc648f3fb6d2f43d54bcef0c01be4a7019cc708b88c10ca810dd1b571c7043b8fedc74ad674157c9d2fe19c0bc1caf2bd4b0af88b1145b2f5621f591fc8de346df507a77a8cde36a2d1e4be39384695e5edb30dd01f9786ae9515593a34340bad30aa1aad825465d5c4d369cc9707b80f7fd40a418724f83ef53f6f2c53366ffca4b9168e55f9e1e02eae97a7f0a31d5f3c2715f11ab18779b21d65627e502c5793e48e7da4f77c048583887f35bbb70bb3332e61d7338489a9e2983110f0bdffd2b1e1967b984f1537564447befb01cf9b5c79d6569a302e4f8103740bfb9c7111f82bb567a7bf0ceb97f74bcfdb2115b047d277563d4772f873121031b2253c330947e149b70e57f4d6f46c0db5fab23551da87f8a505f463ad18bacfe88925a0935760da43f1756c0fc659eadf6302f610dceb707d947328e25794d1e5a659fdfd7dcf6a2b61bb33a66edfd1ad41b70bb0a4999fc9763737fa243365df586002d0964671144e6b7963af2dabbb089f05c3b303ba98441c540fae4aa7175c6b09f911ad20cdbbea661c52faf466bfdc192b0078917e2b0ed7ef1d4e116d684cd335bb3ec695c13b7d3055fd188f538a64561b9d5e3c9b1742addf27bbcb961574b1a390e40d17eb09ed5c7ea4d1f2268b5077496e8bf8d772e04a27ff025dfb209dec6dacbb91950afa4d0aa09bc2f8dc1c60ea69ec8adb8de329fb3a77523f408aa4ad282ac8897da0cc0d57c87b6e438a823b47d1026e29c82e932b97c496bcb5bc864b8586c0cab46b721778d4156da30e715f559ee5da35f44175b1a4dc32ba9724c2262ff433c482f43a908809565d14ae0caf7416d4bab489e7dd2d07fffeac12c8e39ec20628ba40170de0f5280a8823563c955b3d2fd47732e74bf667509a2718363573fdf11b6f159ad5a775028522f2d2c31d09bf3c1ad928d3b5e4c0a58c57c721fdf396285595a65256ffe106dbd64d445651d66a8932233d84347e049df1c3115feaac7a762f73db15e97ef22ab5dd4b0d2a7919afb413cd97dfa2decd42506c26850a883bcb1c629a22358e071e333444b2705ccb5bccf256dc6a9a04e2e6f0105e16625eb6f18305736eeb7ce0adb3726c15d1dcfd15c84d1f2421fdd396e739c46e10ed8e2d6760f2358c12207cb3d541cd29776eb4eae60d985976181f628a7cd281c41c97c754230532ed610998276845d4b3a660cdbb129e3e5d651a0769ecc926c23fe28f6359da86a5b7ced8026f1ee28a29a03281887f6b636648b1026a0488bf5696e94106443c0ba5ada95e565586ed55bcf3d2a5f2d2ef4d538ef6c4779e0dc81ae0de6688594555cdff58f718c98e35ed075426962777ef24b9bdba010415453bc34347e781be3635e0666f98f7218e8bdfe40ffb2c13f870c7b2297d740e1574f0e6c2df1a704c6e5e4315a25899a8346835cfde74559ce06fb274086d755baf5656adf808f9407efd33be3e3d1e2a4c07f8b716ffd089f899bd5fc89475aef03b539d976d8f89cb6e591a0f960ff0ec2888fddea339ceb211bed08fd8c91231adc6026e83c363a3faef6da6cdbb3b6fd607dfc8b25b172a9316c735532c7c21ce104695d9852e688931321b5c525a03784b181560d12a3d8ea3b7da91fa02feb69f2497f1cab8052d8b385f45fd70fa721cfc9d68ff31d4a1dd23d949c17eddc54a2fb9a1df9ec26963b0790186eaf622e0dd139b2229f48f0580b258e09c15e2305eafb97db38580f6ec8e7836fd90312b94e20f9af46ba9de588b080cbc633355e7941d1ee5bb8ed17266974d37e929d4a7686c72376d6b52d93ef8ee40fa8a6816d6ba4aa2e037c188df91a09999338ad5b196fabd52dde8df38b46d920562f177aa41b5aed505c436797848897c881bf67c64afe0f5f2f364a24b622c52864bbd8ce5c16d02f6c42f2c5b349505878a319d7265aa54b45905d00584adbe754976cb449309cb9cff2c98115042456fed356893ad1b15a14da04208eb7fc1646b81a528814dde13cf71e151ffafece4c3377e0d0aea1b8faa5eb9236294384f96212e8aca09c9fb0a22f88def214b99d7e86e1606f9a62b562cd63b406979597cba64b852f001f7ff24633c8281ce966bafca131fc66488ebfa754ecfcce6d2386fd1edb4479ec90033de785ec8af36d848b9836b7174b252491173606817c8905d00aec23f37c5636aa3cd2ddb484fb1fe3e4daa6f5b9ef1c28df5d7db5ddd7b72566fcc309db94d81d75942f871ea71eca3bd3a2575882f41aa878ebc", "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"}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0x4008af03, &(0x7f0000000180)=0x40) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0xfffffdfd) 21:46:35 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b2, &(0x7f0000000040)=0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 21:46:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/232, 0x100000152}], 0x1, 0x0) read(r1, &(0x7f0000000140)=""/189, 0xbd) 21:46:35 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)) 21:46:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="fb5c30c28201912354aafbf78985dc50", 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {}, [], "1316ad04d2d14b82e1b1f5023631b54254e2d12bf1c5f383f9ac4b864db910c7f30b050554315b0539fe3c54546d96a301b5ca7ae1527ee806c0b4e84b6dfbeac743554de70b843630046a11a7b0cdeb4abc45cb8b892760f8bc1da0299bb6ebefe04a2638975e3366c342db07ea083ebceadd16ce71ae8ebdd94a1f7211838887bb14e8c6164956889d856c1515e4c0ffed551038555b767b6f660f9f056f2965709c4c402f5578f8c13580459ac4ccf900352751f05b44e7e4f65bd1fb828fd4e9401276c36095017b352f3e3017cc9c3f10fb3d411b7911afad232797d0a871df7080aceffe11b9fdb406ecdb894955c32fed5715c7e5a8d0e15773424c530098813498caf7eee983e56c558433db0d881da3e88d554e94c9db954adf557e527be42f34758cab5e4638d706a49474153e908e91250b85b48f332c80ad00e32011301be45bd700d2f936eea4add960ee1026e641bca7a5c2bccba71ef4ca5eccff6737dbe88c70ebe0c2900cc515ba967e8252efd1a212bc50dca018a2ddf900c2067e33161d33250cca5ef93ba7c22c10ce8b9d674b661e9435a20fe30642fe4d09d049d914f9cc411187d75be89bd3e2b3339bc046bba9472f340a44f053776d71fb3d650d1b7791c6d6f4d75c818fd53d7e1c1d878ae7c8464b2c578e2394b1967e2bb00f933e48542f5479f424471616fcec2ea977b0e4e77ab94c8f06edd0895f3b9122c28918f55860c018e96b531e5f2fcf25ebe9d7831118af6de8f38c5d121497e96202a4707fe44c5d862dd400a2ecdabb50350d33528b67e3ce3370d61a37aefd77e3268d3f63d643061a49075f6e84f670fae730c70ba888ed779c15f8b88c3e8956b8bf02d9d3361e419d2b58fdce6c851d36660f491d8d09c59c83d6834ad6db11f8a5310eae46deafcb3de8d0b2ff23f3d9f516ccf4256e06825eb696219e7b6a89a5dc52ddcf50ff4319955a703a0cb5e9e13b228d46d77b1e08eccaf9f3ac7eec22371e1283ac3e5483406decf3cbf5c2b138e8785fe43ca4be049565740f276c345b6111188d11e9c2cfd387278b03a558f435c4a35a94e362572b42a7a238e5642d147e18880722f8db5096d609a67f73c653e350ecd2ab659423906427671e06c1412f7c092804889b532f11fb12b0c79716b4f4ce659d54ac92eaeb754ee914202d15b13891635d2e30ff93a648c57e0181af2a449e9c7e9f296572dff4df53854b3e839675943ffd860edad352314d09e12e52899a26cc60ce897acacc560e6db3de91a348562a15fb8fd08b6a442526df0e9266f0dfe62143a7b2d11d2ac899c3a555137e2c699f733dc761373631c3d01d3c9b50667af57ee7e125ec7779ee013847dd56fe70f7bd6c0bb0fd5b8d3ad9fc0c846f44d2b7568a1f19d8bf20ab738f3a8cf40b2f5c6ce0cb92a45c0f443f675316db1bba0ca8e880f3cd152c2f4f1e60763c4816fd1772fd51e968196f7204d28ff5781e36415eb24e9b6d56689db064e0c2102a82b2aa1a4befad6a3219d05310bbbf83b44b63c34f4366e01c110bd83be57b9941db3c629b593563ce6cbc1c9f091bc299bf52c11cbe3d1edec29a989597bcfbae6e4f515bb677f16c35b8277623d2a653957070dd77c3b131563fb47f5e9ac8b93a8adaafd8ffa89ad596acc4131e7062c3f907b3b1f88388fc2214adb0f83e54a63918adb84df1d4414b92ccaf9325212cb1c61d19f7380a97073c7e397bbf78c3ea6cff5c5387c30b8f410c79dad4f44294481da8a28c9be920dabb4fac2ca36955ae13f2cdd5eda099fe410e52c2c67d0a5b361c493962220fb8525af4b0157de2f436ddae504ebc95f6dc954434e1f70b1f7c3e0b9f3881f5b110e479b88b223429a8104da63fe0fd94a1848014bfe826ba41b82408cb43325d64fa7e8e563b73efc6f49b5b15e1b4656c1f47d3c58482de9a81be63784d854523c101f7122f955c689c310372c112866b41fd501f3ed276b87abc39339cb1c24f7bac6ef983a66b838e3f5bc7e64a0e1a1cb2475aa426ff2899ec1fd6af87cf3d27714da161579f4f792ff904372767b3492f9868ba18180c8d0cd33d12c5e20761ef91ac2f0784194f67011a39e991d6a405db8d013eb538556ac03aa29d328963a4efd0831220b261cdc86caa7b86cb9b36cd6f4b1c26cc3dbb679892f5ad7c6d77f23503456b936d4d0d0a7f5faa09b9d5e92efc5e08e0ae579d528703734cda053cf24e03bb1cd8cb4679348d792055b7300e16424d026731f81acf1a8988acb4dc80a0b4b95e9ec86948339749397fb48a363fbc66bcdb21cbaa33412ba2b53645eb3781d4c7029b2ed57c1f153b9be0383870e2e3f7d6f399a12226f3497b6b8003c9581e6665e5ef5203efc27e0efe60ba5d46f6afea6e5c6cd2be85f395b6f4229606c1595efcbb8c92cb26d859e90a0cf323735d8d970ebb9ecfbdfe6f45dd06b70b74ce847e7809f6393c05da0743261ca0e4fcdc0099575aee69ef706dbf1617dbee8d38fd0596d14e6145a8d406b2c98ac6d2aae455c48ebf2937c3da8a74a963c9df1a2f8fa9e425c25d1093991ee7c963848ba658a511bbdde385784dad19695d6434351aa9e1c810ec26aef97e86962064be65672f990f49c9cc825a9964c55640d03d1e98b4cd5c97db6f7a5a8bfbebd5a8d72a8c57eceaa32d30ca071933f2436b2c6f8740291dc0e7e9173cf656fe12d3a2d4afca2d30f9b4536c5b6d9a8af4447c32799eb7c777c9902b6829849ad78b6eb133846054bcfc9c559b2d4c0deb4a45833d20382ba43b697b78a575a04317c1740811d8efe8da50fc3aa24f8b108f910ad0ce253afefcc0641bd92dc4ef8bbdb114bbb989b7b14900c6cc8824733b37c87fa1680886a2b8c7633c1603877a58d3b41da08c89b7f575680968da3f01a4e98decf57372665b42458cc16f57ecee6da26ec62c234ca13fc9256be3b3ec8cc1918fa39282e960054febcea2b3cff470bd4613527391157e7c91a749813286d112ab20dbe5ff9af2a6b68a9193fc37d6b08e6149c90fcda57e9ff68f5822b6e1aaeb01f5a379175fc6662214a19a087ef78bb376f7c523db663fb272d7de1a1b093d444e86b1e562829dba9df2253d9701942840742ca611cb1de2e338a0f4b6e5cbcd9ad47187d394589308e80c15efb77f4bdae0db8054b3fa793da3de4697f12826138ac812886d1c8647610328322df6c16eb6697cc42e73f89429d57a10b4047d3798b611035e0dc2370ee198a39b3e275b9e3c96da5e69fe6f628335e466804479e573c102698b7dc667d7105f885da9f4e2b84362f951018ff3d564f764dcaacc072b90c75c6a0a68bfb485e31b80f89203efa8771d2ad95cdab1d48b420ba759fa4797c848075779f465884b60d1d4589fbf8a0e9b097f6aacc38ce0bad651be5a5da8eb8c47027b1afe7a5bf365c9e57a1cc6c47830c48648d6b5b160bf9c9f9ca6bfa262fd5f16313c4549b518870d1b080c7fc648f3fb6d2f43d54bcef0c01be4a7019cc708b88c10ca810dd1b571c7043b8fedc74ad674157c9d2fe19c0bc1caf2bd4b0af88b1145b2f5621f591fc8de346df507a77a8cde36a2d1e4be39384695e5edb30dd01f9786ae9515593a34340bad30aa1aad825465d5c4d369cc9707b80f7fd40a418724f83ef53f6f2c53366ffca4b9168e55f9e1e02eae97a7f0a31d5f3c2715f11ab18779b21d65627e502c5793e48e7da4f77c048583887f35bbb70bb3332e61d7338489a9e2983110f0bdffd2b1e1967b984f1537564447befb01cf9b5c79d6569a302e4f8103740bfb9c7111f82bb567a7bf0ceb97f74bcfdb2115b047d277563d4772f873121031b2253c330947e149b70e57f4d6f46c0db5fab23551da87f8a505f463ad18bacfe88925a0935760da43f1756c0fc659eadf6302f610dceb707d947328e25794d1e5a659fdfd7dcf6a2b61bb33a66edfd1ad41b70bb0a4999fc9763737fa243365df586002d0964671144e6b7963af2dabbb089f05c3b303ba98441c540fae4aa7175c6b09f911ad20cdbbea661c52faf466bfdc192b0078917e2b0ed7ef1d4e116d684cd335bb3ec695c13b7d3055fd188f538a64561b9d5e3c9b1742addf27bbcb961574b1a390e40d17eb09ed5c7ea4d1f2268b5077496e8bf8d772e04a27ff025dfb209dec6dacbb91950afa4d0aa09bc2f8dc1c60ea69ec8adb8de329fb3a77523f408aa4ad282ac8897da0cc0d57c87b6e438a823b47d1026e29c82e932b97c496bcb5bc864b8586c0cab46b721778d4156da30e715f559ee5da35f44175b1a4dc32ba9724c2262ff433c482f43a908809565d14ae0caf7416d4bab489e7dd2d07fffeac12c8e39ec20628ba40170de0f5280a8823563c955b3d2fd47732e74bf667509a2718363573fdf11b6f159ad5a775028522f2d2c31d09bf3c1ad928d3b5e4c0a58c57c721fdf396285595a65256ffe106dbd64d445651d66a8932233d84347e049df1c3115feaac7a762f73db15e97ef22ab5dd4b0d2a7919afb413cd97dfa2decd42506c26850a883bcb1c629a22358e071e333444b2705ccb5bccf256dc6a9a04e2e6f0105e16625eb6f18305736eeb7ce0adb3726c15d1dcfd15c84d1f2421fdd396e739c46e10ed8e2d6760f2358c12207cb3d541cd29776eb4eae60d985976181f628a7cd281c41c97c754230532ed610998276845d4b3a660cdbb129e3e5d651a0769ecc926c23fe28f6359da86a5b7ced8026f1ee28a29a03281887f6b636648b1026a0488bf5696e94106443c0ba5ada95e565586ed55bcf3d2a5f2d2ef4d538ef6c4779e0dc81ae0de6688594555cdff58f718c98e35ed075426962777ef24b9bdba010415453bc34347e781be3635e0666f98f7218e8bdfe40ffb2c13f870c7b2297d740e1574f0e6c2df1a704c6e5e4315a25899a8346835cfde74559ce06fb274086d755baf5656adf808f9407efd33be3e3d1e2a4c07f8b716ffd089f899bd5fc89475aef03b539d976d8f89cb6e591a0f960ff0ec2888fddea339ceb211bed08fd8c91231adc6026e83c363a3faef6da6cdbb3b6fd607dfc8b25b172a9316c735532c7c21ce104695d9852e688931321b5c525a03784b181560d12a3d8ea3b7da91fa02feb69f2497f1cab8052d8b385f45fd70fa721cfc9d68ff31d4a1dd23d949c17eddc54a2fb9a1df9ec26963b0790186eaf622e0dd139b2229f48f0580b258e09c15e2305eafb97db38580f6ec8e7836fd90312b94e20f9af46ba9de588b080cbc633355e7941d1ee5bb8ed17266974d37e929d4a7686c72376d6b52d93ef8ee40fa8a6816d6ba4aa2e037c188df91a09999338ad5b196fabd52dde8df38b46d920562f177aa41b5aed505c436797848897c881bf67c64afe0f5f2f364a24b622c52864bbd8ce5c16d02f6c42f2c5b349505878a319d7265aa54b45905d00584adbe754976cb449309cb9cff2c98115042456fed356893ad1b15a14da04208eb7fc1646b81a528814dde13cf71e151ffafece4c3377e0d0aea1b8faa5eb9236294384f96212e8aca09c9fb0a22f88def214b99d7e86e1606f9a62b562cd63b406979597cba64b852f001f7ff24633c8281ce966bafca131fc66488ebfa754ecfcce6d2386fd1edb4479ec90033de785ec8af36d848b9836b7174b252491173606817c8905d00aec23f37c5636aa3cd2ddb484fb1fe3e4daa6f5b9ef1c28df5d7db5ddd7b72566fcc309db94d81d75942f871ea71eca3bd3a2575882f41aa878ebc", "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"}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0x4008af03, &(0x7f0000000180)=0x40) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0xfffffdfd) 21:46:35 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 21:46:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/232, 0x100000152}], 0x1, 0x0) read(r1, &(0x7f0000000140)=""/189, 0xbd) 21:46:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/232, 0x100000152}], 0x1, 0x0) read(r1, &(0x7f0000000140)=""/189, 0xbd) 21:46:35 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b2, &(0x7f0000000040)=0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 21:46:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 21:46:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/232, 0x100000152}], 0x1, 0x0) read(r1, &(0x7f0000000140)=""/189, 0xbd) 21:46:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/232, 0x100000152}], 0x1, 0x0) read(r1, &(0x7f0000000140)=""/189, 0xbd) 21:46:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="fb5c30c28201912354aafbf78985dc50", 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {}, [], "1316ad04d2d14b82e1b1f5023631b54254e2d12bf1c5f383f9ac4b864db910c7f30b050554315b0539fe3c54546d96a301b5ca7ae1527ee806c0b4e84b6dfbeac743554de70b843630046a11a7b0cdeb4abc45cb8b892760f8bc1da0299bb6ebefe04a2638975e3366c342db07ea083ebceadd16ce71ae8ebdd94a1f7211838887bb14e8c6164956889d856c1515e4c0ffed551038555b767b6f660f9f056f2965709c4c402f5578f8c13580459ac4ccf900352751f05b44e7e4f65bd1fb828fd4e9401276c36095017b352f3e3017cc9c3f10fb3d411b7911afad232797d0a871df7080aceffe11b9fdb406ecdb894955c32fed5715c7e5a8d0e15773424c530098813498caf7eee983e56c558433db0d881da3e88d554e94c9db954adf557e527be42f34758cab5e4638d706a49474153e908e91250b85b48f332c80ad00e32011301be45bd700d2f936eea4add960ee1026e641bca7a5c2bccba71ef4ca5eccff6737dbe88c70ebe0c2900cc515ba967e8252efd1a212bc50dca018a2ddf900c2067e33161d33250cca5ef93ba7c22c10ce8b9d674b661e9435a20fe30642fe4d09d049d914f9cc411187d75be89bd3e2b3339bc046bba9472f340a44f053776d71fb3d650d1b7791c6d6f4d75c818fd53d7e1c1d878ae7c8464b2c578e2394b1967e2bb00f933e48542f5479f424471616fcec2ea977b0e4e77ab94c8f06edd0895f3b9122c28918f55860c018e96b531e5f2fcf25ebe9d7831118af6de8f38c5d121497e96202a4707fe44c5d862dd400a2ecdabb50350d33528b67e3ce3370d61a37aefd77e3268d3f63d643061a49075f6e84f670fae730c70ba888ed779c15f8b88c3e8956b8bf02d9d3361e419d2b58fdce6c851d36660f491d8d09c59c83d6834ad6db11f8a5310eae46deafcb3de8d0b2ff23f3d9f516ccf4256e06825eb696219e7b6a89a5dc52ddcf50ff4319955a703a0cb5e9e13b228d46d77b1e08eccaf9f3ac7eec22371e1283ac3e5483406decf3cbf5c2b138e8785fe43ca4be049565740f276c345b6111188d11e9c2cfd387278b03a558f435c4a35a94e362572b42a7a238e5642d147e18880722f8db5096d609a67f73c653e350ecd2ab659423906427671e06c1412f7c092804889b532f11fb12b0c79716b4f4ce659d54ac92eaeb754ee914202d15b13891635d2e30ff93a648c57e0181af2a449e9c7e9f296572dff4df53854b3e839675943ffd860edad352314d09e12e52899a26cc60ce897acacc560e6db3de91a348562a15fb8fd08b6a442526df0e9266f0dfe62143a7b2d11d2ac899c3a555137e2c699f733dc761373631c3d01d3c9b50667af57ee7e125ec7779ee013847dd56fe70f7bd6c0bb0fd5b8d3ad9fc0c846f44d2b7568a1f19d8bf20ab738f3a8cf40b2f5c6ce0cb92a45c0f443f675316db1bba0ca8e880f3cd152c2f4f1e60763c4816fd1772fd51e968196f7204d28ff5781e36415eb24e9b6d56689db064e0c2102a82b2aa1a4befad6a3219d05310bbbf83b44b63c34f4366e01c110bd83be57b9941db3c629b593563ce6cbc1c9f091bc299bf52c11cbe3d1edec29a989597bcfbae6e4f515bb677f16c35b8277623d2a653957070dd77c3b131563fb47f5e9ac8b93a8adaafd8ffa89ad596acc4131e7062c3f907b3b1f88388fc2214adb0f83e54a63918adb84df1d4414b92ccaf9325212cb1c61d19f7380a97073c7e397bbf78c3ea6cff5c5387c30b8f410c79dad4f44294481da8a28c9be920dabb4fac2ca36955ae13f2cdd5eda099fe410e52c2c67d0a5b361c493962220fb8525af4b0157de2f436ddae504ebc95f6dc954434e1f70b1f7c3e0b9f3881f5b110e479b88b223429a8104da63fe0fd94a1848014bfe826ba41b82408cb43325d64fa7e8e563b73efc6f49b5b15e1b4656c1f47d3c58482de9a81be63784d854523c101f7122f955c689c310372c112866b41fd501f3ed276b87abc39339cb1c24f7bac6ef983a66b838e3f5bc7e64a0e1a1cb2475aa426ff2899ec1fd6af87cf3d27714da161579f4f792ff904372767b3492f9868ba18180c8d0cd33d12c5e20761ef91ac2f0784194f67011a39e991d6a405db8d013eb538556ac03aa29d328963a4efd0831220b261cdc86caa7b86cb9b36cd6f4b1c26cc3dbb679892f5ad7c6d77f23503456b936d4d0d0a7f5faa09b9d5e92efc5e08e0ae579d528703734cda053cf24e03bb1cd8cb4679348d792055b7300e16424d026731f81acf1a8988acb4dc80a0b4b95e9ec86948339749397fb48a363fbc66bcdb21cbaa33412ba2b53645eb3781d4c7029b2ed57c1f153b9be0383870e2e3f7d6f399a12226f3497b6b8003c9581e6665e5ef5203efc27e0efe60ba5d46f6afea6e5c6cd2be85f395b6f4229606c1595efcbb8c92cb26d859e90a0cf323735d8d970ebb9ecfbdfe6f45dd06b70b74ce847e7809f6393c05da0743261ca0e4fcdc0099575aee69ef706dbf1617dbee8d38fd0596d14e6145a8d406b2c98ac6d2aae455c48ebf2937c3da8a74a963c9df1a2f8fa9e425c25d1093991ee7c963848ba658a511bbdde385784dad19695d6434351aa9e1c810ec26aef97e86962064be65672f990f49c9cc825a9964c55640d03d1e98b4cd5c97db6f7a5a8bfbebd5a8d72a8c57eceaa32d30ca071933f2436b2c6f8740291dc0e7e9173cf656fe12d3a2d4afca2d30f9b4536c5b6d9a8af4447c32799eb7c777c9902b6829849ad78b6eb133846054bcfc9c559b2d4c0deb4a45833d20382ba43b697b78a575a04317c1740811d8efe8da50fc3aa24f8b108f910ad0ce253afefcc0641bd92dc4ef8bbdb114bbb989b7b14900c6cc8824733b37c87fa1680886a2b8c7633c1603877a58d3b41da08c89b7f575680968da3f01a4e98decf57372665b42458cc16f57ecee6da26ec62c234ca13fc9256be3b3ec8cc1918fa39282e960054febcea2b3cff470bd4613527391157e7c91a749813286d112ab20dbe5ff9af2a6b68a9193fc37d6b08e6149c90fcda57e9ff68f5822b6e1aaeb01f5a379175fc6662214a19a087ef78bb376f7c523db663fb272d7de1a1b093d444e86b1e562829dba9df2253d9701942840742ca611cb1de2e338a0f4b6e5cbcd9ad47187d394589308e80c15efb77f4bdae0db8054b3fa793da3de4697f12826138ac812886d1c8647610328322df6c16eb6697cc42e73f89429d57a10b4047d3798b611035e0dc2370ee198a39b3e275b9e3c96da5e69fe6f628335e466804479e573c102698b7dc667d7105f885da9f4e2b84362f951018ff3d564f764dcaacc072b90c75c6a0a68bfb485e31b80f89203efa8771d2ad95cdab1d48b420ba759fa4797c848075779f465884b60d1d4589fbf8a0e9b097f6aacc38ce0bad651be5a5da8eb8c47027b1afe7a5bf365c9e57a1cc6c47830c48648d6b5b160bf9c9f9ca6bfa262fd5f16313c4549b518870d1b080c7fc648f3fb6d2f43d54bcef0c01be4a7019cc708b88c10ca810dd1b571c7043b8fedc74ad674157c9d2fe19c0bc1caf2bd4b0af88b1145b2f5621f591fc8de346df507a77a8cde36a2d1e4be39384695e5edb30dd01f9786ae9515593a34340bad30aa1aad825465d5c4d369cc9707b80f7fd40a418724f83ef53f6f2c53366ffca4b9168e55f9e1e02eae97a7f0a31d5f3c2715f11ab18779b21d65627e502c5793e48e7da4f77c048583887f35bbb70bb3332e61d7338489a9e2983110f0bdffd2b1e1967b984f1537564447befb01cf9b5c79d6569a302e4f8103740bfb9c7111f82bb567a7bf0ceb97f74bcfdb2115b047d277563d4772f873121031b2253c330947e149b70e57f4d6f46c0db5fab23551da87f8a505f463ad18bacfe88925a0935760da43f1756c0fc659eadf6302f610dceb707d947328e25794d1e5a659fdfd7dcf6a2b61bb33a66edfd1ad41b70bb0a4999fc9763737fa243365df586002d0964671144e6b7963af2dabbb089f05c3b303ba98441c540fae4aa7175c6b09f911ad20cdbbea661c52faf466bfdc192b0078917e2b0ed7ef1d4e116d684cd335bb3ec695c13b7d3055fd188f538a64561b9d5e3c9b1742addf27bbcb961574b1a390e40d17eb09ed5c7ea4d1f2268b5077496e8bf8d772e04a27ff025dfb209dec6dacbb91950afa4d0aa09bc2f8dc1c60ea69ec8adb8de329fb3a77523f408aa4ad282ac8897da0cc0d57c87b6e438a823b47d1026e29c82e932b97c496bcb5bc864b8586c0cab46b721778d4156da30e715f559ee5da35f44175b1a4dc32ba9724c2262ff433c482f43a908809565d14ae0caf7416d4bab489e7dd2d07fffeac12c8e39ec20628ba40170de0f5280a8823563c955b3d2fd47732e74bf667509a2718363573fdf11b6f159ad5a775028522f2d2c31d09bf3c1ad928d3b5e4c0a58c57c721fdf396285595a65256ffe106dbd64d445651d66a8932233d84347e049df1c3115feaac7a762f73db15e97ef22ab5dd4b0d2a7919afb413cd97dfa2decd42506c26850a883bcb1c629a22358e071e333444b2705ccb5bccf256dc6a9a04e2e6f0105e16625eb6f18305736eeb7ce0adb3726c15d1dcfd15c84d1f2421fdd396e739c46e10ed8e2d6760f2358c12207cb3d541cd29776eb4eae60d985976181f628a7cd281c41c97c754230532ed610998276845d4b3a660cdbb129e3e5d651a0769ecc926c23fe28f6359da86a5b7ced8026f1ee28a29a03281887f6b636648b1026a0488bf5696e94106443c0ba5ada95e565586ed55bcf3d2a5f2d2ef4d538ef6c4779e0dc81ae0de6688594555cdff58f718c98e35ed075426962777ef24b9bdba010415453bc34347e781be3635e0666f98f7218e8bdfe40ffb2c13f870c7b2297d740e1574f0e6c2df1a704c6e5e4315a25899a8346835cfde74559ce06fb274086d755baf5656adf808f9407efd33be3e3d1e2a4c07f8b716ffd089f899bd5fc89475aef03b539d976d8f89cb6e591a0f960ff0ec2888fddea339ceb211bed08fd8c91231adc6026e83c363a3faef6da6cdbb3b6fd607dfc8b25b172a9316c735532c7c21ce104695d9852e688931321b5c525a03784b181560d12a3d8ea3b7da91fa02feb69f2497f1cab8052d8b385f45fd70fa721cfc9d68ff31d4a1dd23d949c17eddc54a2fb9a1df9ec26963b0790186eaf622e0dd139b2229f48f0580b258e09c15e2305eafb97db38580f6ec8e7836fd90312b94e20f9af46ba9de588b080cbc633355e7941d1ee5bb8ed17266974d37e929d4a7686c72376d6b52d93ef8ee40fa8a6816d6ba4aa2e037c188df91a09999338ad5b196fabd52dde8df38b46d920562f177aa41b5aed505c436797848897c881bf67c64afe0f5f2f364a24b622c52864bbd8ce5c16d02f6c42f2c5b349505878a319d7265aa54b45905d00584adbe754976cb449309cb9cff2c98115042456fed356893ad1b15a14da04208eb7fc1646b81a528814dde13cf71e151ffafece4c3377e0d0aea1b8faa5eb9236294384f96212e8aca09c9fb0a22f88def214b99d7e86e1606f9a62b562cd63b406979597cba64b852f001f7ff24633c8281ce966bafca131fc66488ebfa754ecfcce6d2386fd1edb4479ec90033de785ec8af36d848b9836b7174b252491173606817c8905d00aec23f37c5636aa3cd2ddb484fb1fe3e4daa6f5b9ef1c28df5d7db5ddd7b72566fcc309db94d81d75942f871ea71eca3bd3a2575882f41aa878ebc", "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"}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0x4008af03, &(0x7f0000000180)=0x40) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0xfffffdfd) 21:46:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00\xb0\x90Z.\xa4I\xdarKN\xf3\xd1\x81Z\x01E\xd4\vu\xf5|.|\xddM`\xcfS\x14\a\x18\x8fC\x84,\xad\x96\f_\xcd\xe0-k\xaa\x02\x8f\x9b\x1d\xad)\xe7\x1eH)\xb5\xf8\xa7\xaf\xe9\x11\xdd\xe9\b\x1b8n\xaf\xd4\xa2j5\x04K\x01\'6^k\xe8\"td\xa4\x14\xf4\x01\xf6\xfc\x93\x9aX\x9c\xf6\xfc\xfcB\x93\x16\x93\x16l\x8eE\x12*\xddM\xd78\xea\x9e\xcaE\"$r*\x01\xcc\x981', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) write$cgroup_pid(r1, &(0x7f0000000280), 0x8) 21:46:36 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffffc}) 21:46:36 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b2, &(0x7f0000000040)=0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 437.362463] net_ratelimit: 22 callbacks suppressed [ 437.362482] protocol 88fb is buggy, dev hsr_slave_0 [ 437.373225] protocol 88fb is buggy, dev hsr_slave_1 21:46:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/232, 0x100000152}], 0x1, 0x0) read(r1, &(0x7f0000000140)=""/189, 0xbd) 21:46:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/232, 0x100000152}], 0x1, 0x0) read(r1, &(0x7f0000000140)=""/189, 0xbd) 21:46:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc01864c9, &(0x7f0000000040)) 21:46:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="fb5c30c28201912354aafbf78985dc50", 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0x4008af03, &(0x7f0000000180)=0x40) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0xfffffdfd) 21:46:36 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000400f90001000000200000aae20d"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000000000/0x4000)=nil, 0x0) 21:46:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffff7ffbbfffffff, 0x6, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000040)="9b247f9c1793", &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000380)=""/42, 0xf0) 21:46:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x2, 0xffffffff]) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) close(r0) 21:46:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@setlink={0x2c, 0x13, 0x811, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc}]}, 0x2c}}, 0x0) [ 438.082669] protocol 88fb is buggy, dev hsr_slave_0 [ 438.088447] protocol 88fb is buggy, dev hsr_slave_1 21:46:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x8000400) bind$alg(r0, 0x0, 0x0) 21:46:37 executing program 1: lsetxattr$security_smack_transmute(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) 21:46:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @remote}}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 21:46:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000002000020000627c05000500000000000a00000000010000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a0000000000000000000000ffffac1414aa0000000057000000000000000000000000000004"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 21:46:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x79}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000200)) [ 438.572726] protocol 88fb is buggy, dev hsr_slave_0 [ 438.578633] protocol 88fb is buggy, dev hsr_slave_1 21:46:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=[{0x18, 0x0, 0x7, "8908"}], 0x18}}], 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0), 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) [ 438.642684] protocol 88fb is buggy, dev hsr_slave_0 [ 438.648537] protocol 88fb is buggy, dev hsr_slave_1 21:46:37 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000bf4fe0)={0x18, 0x2, {0x0, @loopback}}, 0x20) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) [ 438.802410] protocol 88fb is buggy, dev hsr_slave_0 [ 438.808087] protocol 88fb is buggy, dev hsr_slave_1 21:46:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) 21:46:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x6e22}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003fffffffffffff000cfb193e7ee00000000000000000000000000", 0x58}], 0x1) 21:46:38 executing program 2: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x0, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 21:46:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8e9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f00000007c0)=[{r0}], 0x1, 0x8) 21:46:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000071, 0x0, 0x1b], [0xc2]}) 21:46:38 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x13, &(0x7f0000000140)=0x5, 0xff14) close(0xffffffffffffffff) close(r0) 21:46:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x7ff) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 21:46:38 executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00') [ 439.493107] kvm [15430]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 21:46:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) [ 439.591306] kvm [15430]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 21:46:38 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000007c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000480)=[@authinfo={0x18}], 0x18}, 0x4000000) 21:46:38 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r0, &(0x7f0000000240)={0x7}, 0xfffffe16) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 21:46:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xc000000100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230317"]) 21:46:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x7ff) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 21:46:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100040}, {0x80000006}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) 21:46:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000071, 0x0, 0x1b], [0xc2]}) [ 440.020718] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 21:46:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000020807041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 21:46:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x7ff) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) [ 440.254271] kvm [15469]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 21:46:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r0, &(0x7f0000000180), 0x10) r1 = dup(r0) shutdown(r1, 0x1) shutdown(r0, 0x1) 21:46:39 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xcdd0, 0x4, 0x4, 0x400, {}, {0x2, 0xe, 0x3, 0x1f, 0xd8, 0x8, "44d0d383"}, 0x20, 0x0, @planes=&(0x7f0000000040)={0x3, 0x5, @fd=r0, 0x5}, 0x4}) [ 440.325497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 21:46:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000071, 0x0, 0x1b], [0xc2]}) 21:46:39 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x8000}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x5}) 21:46:39 executing program 2: socketpair$unix(0x1, 0x80000000000002, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 21:46:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x7ff) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 21:46:40 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001200)=ANY=[@ANYBLOB='-3'], 0x2) 21:46:40 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000380)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)) 21:46:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x600000000000000, [0x40000071, 0x0, 0x1b], [0xc2]}) 21:46:40 executing program 5: r0 = socket(0x1e, 0x2, 0x0) r1 = socket(0x800000000000001e, 0x200000000000002, 0x0) r2 = socket$inet6(0xa, 0x200000000000803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000001380), 0x0, &(0x7f0000d19000)}, 0x0) close(r0) 21:46:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 21:46:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100040}, {0x80000006}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) [ 441.706908] kvm [15524]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 21:46:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e61748cf7000000000000000000000000000000000000000000008ecaf030913c326f7a34000000000000000000000000000000000000000000e734b16a000004000000000000000000000000000000000000000000000000000000faffffffff"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:46:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_delrule={0x3c, 0x21, 0xc05, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8}, @FRA_SRC={0x14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 21:46:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket(0x2000000000000021, 0x2, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x110, 0x7c, 0x0, 0x0) 21:46:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100040}, {0x80000006}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) 21:46:41 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "ac"}, 0x2) 21:46:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:41 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000010c0)={@val, @val, @ipx={0xffff, 0xfe2, 0x0, 0x0, {@random, @broadcast}, {@random, @random="d7b52e2ab5df"}, "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"}}, 0xff0) [ 442.733259] net_ratelimit: 18 callbacks suppressed [ 442.733303] protocol 88fb is buggy, dev hsr_slave_0 [ 442.744062] protocol 88fb is buggy, dev hsr_slave_1 [ 442.802674] protocol 88fb is buggy, dev hsr_slave_0 [ 442.808817] protocol 88fb is buggy, dev hsr_slave_1 21:46:41 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x40002014}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 442.962669] protocol 88fb is buggy, dev hsr_slave_0 [ 442.968568] protocol 88fb is buggy, dev hsr_slave_1 21:46:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffff65308b0ebd825de7c1780e00700000000000ef676f96094bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) [ 443.202673] protocol 88fb is buggy, dev hsr_slave_0 [ 443.208350] protocol 88fb is buggy, dev hsr_slave_1 21:46:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100040}, {0x80000006}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) [ 443.602597] protocol 88fb is buggy, dev hsr_slave_0 [ 443.608488] protocol 88fb is buggy, dev hsr_slave_1 21:46:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000140)) 21:46:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:43 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 21:46:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:43 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000013ff4)={@remote}, 0xc) close(r2) dup3(r0, r3, 0x0) 21:46:43 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="2400000020002501075f0165ff61fc2280000000001000220ee1000c08000d00feff1700", 0x24) [ 447.762136] net_ratelimit: 22 callbacks suppressed [ 447.767138] protocol 88fb is buggy, dev hsr_slave_0 [ 447.772785] protocol 88fb is buggy, dev hsr_slave_1 [ 448.492454] protocol 88fb is buggy, dev hsr_slave_0 [ 448.497964] protocol 88fb is buggy, dev hsr_slave_1 [ 448.962093] protocol 88fb is buggy, dev hsr_slave_0 [ 448.967520] protocol 88fb is buggy, dev hsr_slave_1 [ 449.042200] protocol 88fb is buggy, dev hsr_slave_0 [ 449.047550] protocol 88fb is buggy, dev hsr_slave_1 [ 449.202335] protocol 88fb is buggy, dev hsr_slave_0 [ 449.207936] protocol 88fb is buggy, dev hsr_slave_1 21:46:51 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "ac"}, 0x2) 21:46:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0f013e00083e0f2258b8dd000f00d8ba2100ecf0215af20f01c9b823000f00d80f20c06635010000000f22c077b265d9c7"}], 0x1, 0xfffffffffffffffc, 0x0, 0xc8c4fb576c45a5e7) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80300, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x7, 0x2, 0xff, 0x3d, 0x84}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) set_mempolicy(0x4, 0x0, 0x7) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:46:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000013ff4)={@remote}, 0xc) close(r2) dup3(r0, r3, 0x0) 21:46:51 executing program 2: r0 = socket(0x800000002b, 0x1, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008850) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8918, 0x0) 21:46:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:46:51 executing program 3: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffff8, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000826fe0)={0x0, 0x1, 0x0, 0x81}) 21:46:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') lseek(r0, 0x0, 0x1) [ 453.122627] net_ratelimit: 18 callbacks suppressed [ 453.122646] protocol 88fb is buggy, dev hsr_slave_0 [ 453.133517] protocol 88fb is buggy, dev hsr_slave_1 21:46:52 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, &(0x7f0000000380)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f0000000240)={'sha224-generic\x00'}}) [ 453.202605] protocol 88fb is buggy, dev hsr_slave_0 [ 453.208363] protocol 88fb is buggy, dev hsr_slave_1 21:46:52 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000013ff4)={@remote}, 0xc) close(r2) dup3(r0, r3, 0x0) [ 453.362384] protocol 88fb is buggy, dev hsr_slave_0 [ 453.368137] protocol 88fb is buggy, dev hsr_slave_1 21:46:52 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xef) read(r0, &(0x7f0000004f45)=""/187, 0xbb) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000013ffc)=0x2, 0x33) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@fragment, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 21:46:52 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/version\x00Z\xa2\xac\x00\x00\xb8\xb5\xa2\x8a)\xae\xcb\xf8C8ZQ%\x03\x98\xce\x12\xd9\x84\xf5*\x14\x9e\xaf\x98f\xf3\xc38(\xfes\xd4\xf3\x19R\x8b\xbd\x89\xfc\xef\xb6%\xad\xacF\xdfu\"\xeb\xb2<\x98\xadi\xbd\xc8%\t\xdfoCy\x17\x02\x00\x00\x00\xca\x02\x98\x89\x05\xb6r\xc3\xa2\r\x10\xf8\x90\xb9\xf5w$4\v8N\xcaa6\xea\xe4\xfdJ\x01^\a0v\xb8\xf1\xcd\xe4^\xea\x0f\x0f\f<\xa6N\xbd\xd0\xce\xfc\r\x9e\x8e\xa9\x1d\v\xbb\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0) [ 453.602639] protocol 88fb is buggy, dev hsr_slave_0 [ 453.608397] protocol 88fb is buggy, dev hsr_slave_1 21:46:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0f013e00083e0f2258b8dd000f00d8ba2100ecf0215af20f01c9b823000f00d80f20c06635010000000f22c077b265d9c7"}], 0x1, 0xfffffffffffffffc, 0x0, 0xc8c4fb576c45a5e7) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80300, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x7, 0x2, 0xff, 0x3d, 0x84}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) set_mempolicy(0x4, 0x0, 0x7) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 454.002419] protocol 88fb is buggy, dev hsr_slave_0 [ 454.008205] protocol 88fb is buggy, dev hsr_slave_1 [ 458.162082] net_ratelimit: 22 callbacks suppressed [ 458.167095] protocol 88fb is buggy, dev hsr_slave_0 [ 458.172651] protocol 88fb is buggy, dev hsr_slave_1 [ 458.882418] protocol 88fb is buggy, dev hsr_slave_0 [ 458.888072] protocol 88fb is buggy, dev hsr_slave_1 [ 459.362028] protocol 88fb is buggy, dev hsr_slave_0 [ 459.367604] protocol 88fb is buggy, dev hsr_slave_1 [ 459.441990] protocol 88fb is buggy, dev hsr_slave_0 [ 459.447526] protocol 88fb is buggy, dev hsr_slave_1 [ 459.602088] protocol 88fb is buggy, dev hsr_slave_0 [ 459.607681] protocol 88fb is buggy, dev hsr_slave_1 [ 463.522074] net_ratelimit: 18 callbacks suppressed [ 463.522086] protocol 88fb is buggy, dev hsr_slave_0 [ 463.532604] protocol 88fb is buggy, dev hsr_slave_1 [ 463.602263] protocol 88fb is buggy, dev hsr_slave_0 [ 463.607809] protocol 88fb is buggy, dev hsr_slave_1 21:47:02 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "ac"}, 0x2) 21:47:02 executing program 2: prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) 21:47:02 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 21:47:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000013ff4)={@remote}, 0xc) close(r2) dup3(r0, r3, 0x0) 21:47:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140), r1, 0x0, 0x0, 0x400000}}, 0x20) 21:47:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0f013e00083e0f2258b8dd000f00d8ba2100ecf0215af20f01c9b823000f00d80f20c06635010000000f22c077b265d9c7"}], 0x1, 0xfffffffffffffffc, 0x0, 0xc8c4fb576c45a5e7) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80300, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x7, 0x2, 0xff, 0x3d, 0x84}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) set_mempolicy(0x4, 0x0, 0x7) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 463.768211] protocol 88fb is buggy, dev hsr_slave_0 [ 463.773777] protocol 88fb is buggy, dev hsr_slave_1 21:47:03 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x600210) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {0x0, 0x7ffffffff000}], 0x2) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, 0x0, 0x102002700) [ 464.002398] protocol 88fb is buggy, dev hsr_slave_0 [ 464.008083] protocol 88fb is buggy, dev hsr_slave_1 21:47:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffff, 0x4) listen(r1, 0x100000000009) listen(r1, 0x0) listen(r1, 0x3) 21:47:03 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100), 0x7b5ec5) 21:47:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) shutdown(r0, 0x0) 21:47:03 executing program 3: r0 = socket$kcm(0x29, 0x2000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) [ 464.412729] protocol 88fb is buggy, dev hsr_slave_0 [ 464.418482] protocol 88fb is buggy, dev hsr_slave_1 21:47:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @loopback}}}, 0x108) [ 468.562086] net_ratelimit: 22 callbacks suppressed [ 468.567102] protocol 88fb is buggy, dev hsr_slave_0 [ 468.572607] protocol 88fb is buggy, dev hsr_slave_1 [ 469.282477] protocol 88fb is buggy, dev hsr_slave_0 [ 469.288187] protocol 88fb is buggy, dev hsr_slave_1 [ 469.762041] protocol 88fb is buggy, dev hsr_slave_0 [ 469.767657] protocol 88fb is buggy, dev hsr_slave_1 [ 469.842236] protocol 88fb is buggy, dev hsr_slave_0 [ 469.847754] protocol 88fb is buggy, dev hsr_slave_1 [ 470.002416] protocol 88fb is buggy, dev hsr_slave_0 [ 470.007857] protocol 88fb is buggy, dev hsr_slave_1 [ 473.922061] net_ratelimit: 18 callbacks suppressed [ 473.922073] protocol 88fb is buggy, dev hsr_slave_0 [ 473.932986] protocol 88fb is buggy, dev hsr_slave_1 21:47:13 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$vhci(r0, &(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, "ac"}, 0x2) 21:47:13 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffd9e, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_newrule={0x38, 0x20, 0x21, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, [@FRA_FLOW={0x8}, @FRA_SRC={0x8}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8}]}, 0x13f}}, 0x0) 21:47:13 executing program 4: r0 = socket(0x2, 0x5, 0x0) shutdown(r0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)) 21:47:13 executing program 2: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x3) 21:47:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="0f013e00083e0f2258b8dd000f00d8ba2100ecf0215af20f01c9b823000f00d80f20c06635010000000f22c077b265d9c7"}], 0x1, 0xfffffffffffffffc, 0x0, 0xc8c4fb576c45a5e7) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80300, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x7, 0x2, 0xff, 0x3d, 0x84}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) set_mempolicy(0x4, 0x0, 0x7) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:47:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x8) [ 474.007739] protocol 88fb is buggy, dev hsr_slave_0 [ 474.013430] protocol 88fb is buggy, dev hsr_slave_1 [ 474.162589] protocol 88fb is buggy, dev hsr_slave_0 [ 474.168366] protocol 88fb is buggy, dev hsr_slave_1 21:47:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000}) epoll_pwait(r1, &(0x7f0000dc7fc4)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 21:47:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x24b) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) 21:47:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) dup3(r0, r1, 0x0) 21:47:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000f060501ff0080fffdfffd2e0a0000000c000140070000007defff010c000b00000022ff02f10000"], 0x2c}}, 0x0) [ 474.402627] protocol 88fb is buggy, dev hsr_slave_0 [ 474.408496] protocol 88fb is buggy, dev hsr_slave_1 21:47:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x103}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 21:47:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 474.687995] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 474.695606] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 474.802497] protocol 88fb is buggy, dev hsr_slave_0 [ 474.808179] protocol 88fb is buggy, dev hsr_slave_1 [ 478.962235] net_ratelimit: 22 callbacks suppressed [ 478.967244] protocol 88fb is buggy, dev hsr_slave_0 [ 478.972650] protocol 88fb is buggy, dev hsr_slave_1 [ 479.682537] protocol 88fb is buggy, dev hsr_slave_0 [ 479.688368] protocol 88fb is buggy, dev hsr_slave_1 [ 480.162394] protocol 88fb is buggy, dev hsr_slave_0 [ 480.167849] protocol 88fb is buggy, dev hsr_slave_1 [ 480.242014] protocol 88fb is buggy, dev hsr_slave_0 [ 480.247693] protocol 88fb is buggy, dev hsr_slave_1 [ 480.402125] protocol 88fb is buggy, dev hsr_slave_0 [ 480.407790] protocol 88fb is buggy, dev hsr_slave_1 21:47:23 executing program 2: clone(0x2103005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) 21:47:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 21:47:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x103}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 21:47:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents(r0, 0x0, 0x0) 21:47:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) unshare(0x8000400) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 21:47:23 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r1, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'rmd320\x00'}, &(0x7f0000000240)}) [ 484.322406] net_ratelimit: 18 callbacks suppressed [ 484.322425] protocol 88fb is buggy, dev hsr_slave_0 [ 484.333176] protocol 88fb is buggy, dev hsr_slave_1 [ 484.402603] protocol 88fb is buggy, dev hsr_slave_0 [ 484.408400] protocol 88fb is buggy, dev hsr_slave_1 21:47:23 executing program 1: clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) exit(0x0) sendfile(r2, r0, 0x0, 0x20000000000) 21:47:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1}, 0x1c}}, 0x0) [ 484.562252] protocol 88fb is buggy, dev hsr_slave_0 [ 484.567941] protocol 88fb is buggy, dev hsr_slave_1 21:47:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x103}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 21:47:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="1b00000019003ffe2a46f799e7ce00fe029ac2a001000000fc0500", 0x1b}], 0x1}, 0x0) 21:47:23 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3}, {0x10000000000006, 0x0, 0x0, 0xffffff7f7ffffffd}]}) [ 484.802670] protocol 88fb is buggy, dev hsr_slave_0 [ 484.808549] protocol 88fb is buggy, dev hsr_slave_1 21:47:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffd4, 0xa, 0x0, 0x10}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 21:47:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet6(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) [ 485.202632] protocol 88fb is buggy, dev hsr_slave_0 [ 485.208482] protocol 88fb is buggy, dev hsr_slave_1 21:47:24 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/215, 0xd7}], 0x2, 0x0) 21:47:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x0, 0x103}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x0, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 21:47:24 executing program 2: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000000000)) r0 = getpgrp(0xffffffffffffffff) setpriority(0x0, r0, 0x0) 21:47:24 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d7134cf6efbe06bbace8017cbec4c2ee5a7cef4c02631631fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457c0b03c10964c360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) 21:47:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0xfffffffffffffff7}, {}, @quote}], 0xffc3) 21:47:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x4000000003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000), 0x13a, 0x0, 0x0}) [ 485.617459] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 485.637285] binder: 15826:15829 ioctl c0306201 20000300 returned -14 [ 485.668749] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 485.675896] binder: 15826:15840 ioctl c0306201 20000300 returned -14 21:47:24 executing program 2: r0 = memfd_create(&(0x7f0000000180)='#vmnet1\xfbodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, 0x0, &(0x7f0000000000)) 21:47:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000001280)=0x3) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x10002) read$FUSE(r0, &(0x7f0000003180), 0x1000) read$FUSE(r0, &(0x7f0000000100), 0x1000) 21:47:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000080)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x541) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, &(0x7f0000000040), 0x20005) 21:47:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0) 21:47:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:25 executing program 5: io_setup(0x5b3, &(0x7f0000000040)=0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x4000000000000000, 0xf0000000000012, 0x0, 0x0, r1}]) 21:47:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000000)) 21:47:25 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) [ 486.350315] input: syz1 as /devices/virtual/input/input21 21:47:25 executing program 3: unshare(0x20400) r0 = socket$inet6(0xa, 0x3, 0x3f) fcntl$getflags(r0, 0x40b) 21:47:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x47}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 21:47:25 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000a8fa2)={@link_local, @link_local, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@rr={0x7, 0x3, 0x4}, @timestamp={0x44, 0x10, 0x9, 0x1, 0x0, [{}, {[@empty]}]}]}}, @icmp=@timestamp}}}}, 0x0) 21:47:25 executing program 5: socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) [ 486.635184] input: syz1 as /devices/virtual/input/input22 21:47:25 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001500)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x28, 0xb11, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) recvfrom(r1, &(0x7f0000000040)=""/86, 0x56, 0x0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x70f000) 21:47:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00sy\x005\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000300)='threaded\x00', 0x9) 21:47:26 executing program 1: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 21:47:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) fchmod(r1, 0x0) fchown(r1, 0x0, 0x0) 21:47:26 executing program 5: socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) 21:47:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000000330001"]) ioctl$KVM_SET_LAPIC(r2, 0xaeb7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 487.325862] input: syz1 as /devices/virtual/input/input23 21:47:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) 21:47:26 executing program 5: socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) 21:47:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00sy\x005\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000300)='threaded\x00', 0x9) 21:47:26 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'sit0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) dup3(r1, r0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}, 0x1e) 21:47:26 executing program 3: r0 = socket$kcm(0x29, 0x200000005, 0x0) r1 = dup2(r0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x40080) sendmmsg(r0, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0) 21:47:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00sy\x005\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000300)='threaded\x00', 0x9) 21:47:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x3c}, {0x20000000000006}]}, 0x10) 21:47:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) 21:47:27 executing program 5: socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) [ 488.041318] input: syz1 as /devices/virtual/input/input24 21:47:27 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000008024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r1, 0x29, 0x15, 0x0, 0x317) close(r1) close(r0) 21:47:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00sy\x005\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000300)='threaded\x00', 0x9) 21:47:27 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net\x00') socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000080)=r0, 0x4) 21:47:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:27 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x2) dup2(r0, r2) [ 488.595613] input: syz1 as /devices/virtual/input/input25 21:47:27 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, 0x0, 0x0) 21:47:27 executing program 0: capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 21:47:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) get_robust_list(0x0, 0x0, &(0x7f0000000240)) [ 488.859357] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 21:47:27 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 21:47:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000480)="66440f01dfc4c131d8d6b9770300000f32420fc75e0067814600114f0000440f20c03508000000440f22c0f3410f35260f30660f23bc48b81e080000000000000f23d00f21f8351000000c0f23f8", 0x4e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:28 executing program 5: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000840)=@abs, &(0x7f0000000740)=0x6e, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000480)={0x7fffffff, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000680)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000940)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000500), 0xfffffd6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000380)) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\xec\xff\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x00', 0x0}) prlimit64(r2, 0xc, &(0x7f0000000440)={0x50}, &(0x7f00000004c0)) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r5, @ANYPTR], 0x2}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, 0x27, r5}) getresuid(&(0x7f0000000300), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r7 = getgid() fchown(r4, r6, r7) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087705, 0x3) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) stat(0x0, &(0x7f00000005c0)) r9 = socket$inet(0x10, 0x4000000000002, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2f0000001c000367ffffff000d0000000200000001000000000003c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000540), &(0x7f0000000640)) 21:47:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) write(r1, &(0x7f0000000100), 0x276) [ 489.101256] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:47:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f00000002c0)=0x68) 21:47:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x0, 0x40000000}) 21:47:28 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x32, &(0x7f0000000ffc)=@fragment, 0x14) [ 489.406781] net_ratelimit: 22 callbacks suppressed [ 489.406801] protocol 88fb is buggy, dev hsr_slave_0 [ 489.417343] protocol 88fb is buggy, dev hsr_slave_1 21:47:28 executing program 1: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in=@multicast1}, [@srcaddr={0x14}]}, 0x3c}, 0x8}, 0x0) 21:47:28 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x1012, r1, 0x0) ioctl(r0, 0xc1004111, &(0x7f0000001f64)) 21:47:28 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x5}, 0xc) 21:47:28 executing program 2: unshare(0x20400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x27, 0x0, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) [ 489.653428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:47:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x0, 0x40000000}) [ 489.716462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 21:47:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x267, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x4bb, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendto$inet(r0, &(0x7f0000000280)="4c2ac58e9cdce87c9f4d7efcf2dbe318d5e47d5bbd6c6f2dcd1479bf765649f93e848166e1b6e2050bea896e3c6b6225ba613bcbc4f868f37fe78effad8b595f0d9600021b1f9d754c5c26f3eb3958f0519d62bf51300ad692f142bceeba345b57b495d4494ec575cf3917b06bd499b075b5745c58dff3879590ceb863a3b550076f482dabe2c9eee937a1cc5d2d32a9e031d9fa3855e54b5f8cc489f0d06c0216d2062906c33a76d14a54098f2c716f5a34905640cf585a3776d8b5be09b47ca91cad107d7f231cade6e4ddfa301f0e0a0bc97b15e8", 0xd6, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}}, 0x1fffffff) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) 21:47:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 21:47:29 executing program 3: r0 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x100000000000031, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000180)) 21:47:29 executing program 2: unshare(0x28020400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) [ 490.082429] protocol 88fb is buggy, dev hsr_slave_0 [ 490.088170] protocol 88fb is buggy, dev hsr_slave_1 21:47:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x0, 0x40000000}) 21:47:29 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:nodev 0000057'], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="92", 0x1) 21:47:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x215, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x8, 0x4, [@TIPC_NLA_LINK_PROP={0x4, 0x9}]}]}, 0x1c}}, 0x0) 21:47:29 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="050000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004002000000", 0x38}]) 21:47:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x0, 0x40000000}) 21:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1800000010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r1, 0x207, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) 21:47:29 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:nodev 0000057'], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="92", 0x1) [ 490.453349] encrypted_key: insufficient parameters specified 21:47:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00:\x92\x96\x1e\xe5\xce\x06\xe7B\xbf\xe7M\xd5\x86\'\a6\a!Y\xd1\x7f14\a\x82(\xb3\x1dE\xd8\xb3\xf5\x8d\x93D\n&\xe8\x8fpj\x0eL\xb5\xcc\xf6\x1f\x02]49\xea\x947\x0f\xf73\x00\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000fffffeff) [ 490.558209] netlink: 'syz-executor.5': attribute type 9 has an invalid length. [ 490.562564] protocol 88fb is buggy, dev hsr_slave_0 [ 490.571368] protocol 88fb is buggy, dev hsr_slave_1 [ 490.642509] protocol 88fb is buggy, dev hsr_slave_0 [ 490.648360] protocol 88fb is buggy, dev hsr_slave_1 21:47:29 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:nodev 0000057'], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="92", 0x1) 21:47:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 21:47:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000197) 21:47:29 executing program 5: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000000011) [ 490.802372] protocol 88fb is buggy, dev hsr_slave_0 [ 490.807973] protocol 88fb is buggy, dev hsr_slave_1 21:47:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@rand_addr="cc1a1d5fce7233706852b0ec17a46e17"}}, 0xe8) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:30 executing program 3: r0 = socket$inet(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x108, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xfffffffd, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc={0x27, 0x7}, 0x80, 0x0}, 0x0) [ 491.040066] encrypted_key: insufficient parameters specified 21:47:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000100)=""/46, &(0x7f0000000140)=0x2e) 21:47:30 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000006e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) 21:47:30 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:nodev 0000057'], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="92", 0x1) 21:47:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@rand_addr="cc1a1d5fce7233706852b0ec17a46e17"}}, 0xe8) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:30 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = dup(r0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) sendto$rxrpc(r0, 0x0, 0xfffffffffffffe16, 0x0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 21:47:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x201) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x6800, [{0x0, 0x400a00, 0x7ff0bdbe}]}) dup2(r1, r0) [ 491.541373] encrypted_key: insufficient parameters specified 21:47:30 executing program 1: clone(0x2102009ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x2, 0x1d8, [0x20000280, 0x0, 0x0, 0x20000350, 0x20000380], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x250) 21:47:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000197) 21:47:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@rand_addr="cc1a1d5fce7233706852b0ec17a46e17"}}, 0xe8) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0xfffffffffffffddf, 0x0, 0x1a0, &(0x7f0000000000)=ANY=[]}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x255, 0x400000000000) [ 491.748519] vhci_hcd: default hub control req: c7e9 v025a i0003 l11878 21:47:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x8) sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) [ 491.859508] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 491.966140] kernel msg: ebtables bug: please report to author: entry offsets not in right order 21:47:31 executing program 3: unshare(0x2000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r0, 0x28, 0x1, 0x0, &(0x7f0000000140)=0x19361f5328f8f071) 21:47:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in6=@rand_addr="cc1a1d5fce7233706852b0ec17a46e17"}}, 0xe8) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 21:47:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x4000000000004fc, 0x0, &(0x7f0000000180)={0x77359400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:47:31 executing program 1: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x81}) 21:47:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5504, 0x0) 21:47:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000197) 21:47:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000003c0)) 21:47:31 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'nat\x00\x00\x00\x00\x00\x00\x02\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 21:47:31 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000e40), 0xfffffffffffffee4, 0x0, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x65) [ 492.824927] IPVS: ftp: loaded support on port[0] = 21 21:47:31 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x4000000000004fc, 0x0, &(0x7f0000000180)={0x77359400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:47:32 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x11, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000000000)=@ethernet={0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000001580)=""/105, 0x69}}], 0x1, 0x0, 0x0) [ 493.159245] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:47:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x8) sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) 21:47:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000197) [ 493.365015] input: syz1 as /devices/virtual/input/input28 21:47:32 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6d7, 0x2) pwritev(r0, &(0x7f0000001540)=[{&(0x7f0000001480)="fd", 0x1}], 0x1, 0x300000000000000) 21:47:32 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x4000000000004fc, 0x0, &(0x7f0000000180)={0x77359400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:47:32 executing program 1: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xd, @raw_data="ceb1683af39a80d3187258c3e43cd13042f307cdf0ff3c4eb5ac44bf41ec88e267603d748002409ed793754b98681b74584f3a69d658892b3a23b01b9c91e9d5c396389d9f79713601f678124b76173c6cdd32b1887f4ca9519985f5f5e2053e6f4f40ebcf6c05371de954ee88c506386d31236cd23be5e66fee828c7aacf51f86d669c241122ee541788f5c3f2d54d4f478557022c6a39d13dea69109be94a0afd02376e8a00466a29c5f9c593b36a9efc1b713242aae425e66e011a11a92c65d483378e5b16199"}) 21:47:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@migrate={0xac, 0x21, 0x21, 0x0, 0x0, {{@in=@local}}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@local}, {@in=@broadcast, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}]}, 0xac}}, 0x0) 21:47:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 494.134987] input: syz1 as /devices/virtual/input/input30 21:47:33 executing program 2: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) flock(r0, 0x0) 21:47:33 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x4000000000004fc, 0x0, &(0x7f0000000180)={0x77359400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:47:33 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) semtimedop(r0, &(0x7f0000036ff4)=[{}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) [ 494.273455] input: syz1 as /devices/virtual/input/input31 [ 494.722466] net_ratelimit: 18 callbacks suppressed [ 494.722486] protocol 88fb is buggy, dev hsr_slave_0 [ 494.733206] protocol 88fb is buggy, dev hsr_slave_1 [ 494.802297] protocol 88fb is buggy, dev hsr_slave_0 [ 494.807915] protocol 88fb is buggy, dev hsr_slave_1 [ 494.962365] protocol 88fb is buggy, dev hsr_slave_0 [ 494.968071] protocol 88fb is buggy, dev hsr_slave_1 21:47:34 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x8) sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) 21:47:34 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000011000/0x3000)=nil, 0x3000) 21:47:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0xc05, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) 21:47:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:34 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0xa, 0x0, "17606e0f2b5c2bc9db5a0f9cc0fbda7643ed12de15d50361a077e48500"}) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) [ 495.136071] input: syz1 as /devices/virtual/input/input32 [ 495.157982] input: syz1 as /devices/virtual/input/input33 [ 495.202805] protocol 88fb is buggy, dev hsr_slave_0 [ 495.208698] protocol 88fb is buggy, dev hsr_slave_1 21:47:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x7a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x4e21, 0x4e20, 0x8}}}}}}, 0x0) 21:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001b00)={&(0x7f0000000040), 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)=@ipv6_newroute={0x30, 0x18, 0x325, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}}, 0x0) 21:47:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) dup2(r0, r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)) 21:47:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 21:47:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 495.602737] protocol 88fb is buggy, dev hsr_slave_0 [ 495.608532] protocol 88fb is buggy, dev hsr_slave_1 21:47:34 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x24020400) getsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000100), &(0x7f0000006e00)=0xffffffffffffffe2) [ 495.783968] input: syz1 as /devices/virtual/input/input34 [ 495.813850] input: syz1 as /devices/virtual/input/input35 21:47:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x8) sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300) 21:47:35 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1}) 21:47:35 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184151, 0x0) 21:47:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000080)=0x68) close(r2) close(r1) 21:47:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0xb, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12"}) 21:47:35 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 496.509307] usb usb5: usbfs: process 16319 (syz-executor.2) did not claim interface 0 before use 21:47:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010f90005000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:47:35 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:35 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x54485746, 0x0, @stepwise}) 21:47:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='a}\xa1\xa2\v/dev/auq\x88\xe2S\xab\xc1L!\'\xf3\xa3\xd0\xd5\xae|\x0e\x19O\x94u\x16?c^N\xe8<\"=AM\x19\x9d\xedW\x82!\x86ZwxM#2+$\n\x93\x95\xd0\x90\x1a\x1bH\xd5\x1dc\x98\x98Vf=:\xe6\x97bW\x82\xee<\x15\xcaw\x19\xfe\xcd\xa6\xfd\xbf\x949\x0e\xd7\xee\x9e\xee\xc6\xbff\x9e#\x02\x93>\xf5NVS\xb6,\xb6\ay\vO\xb4\xd0g\x06%\xc6\xde|\x9d\x11\xb9\x83\x91&\xf2\x8b}\x82\xcf\xf2\xbf\xa7.\x98l{\x97\xf6\x14\x7f~\xfd7f\x16\x16}\x8a\xd5\xee\xab\xc2\vBN\x81\x89\xbbAbL\xbd\xef+\x8a\xc7\xbbh\xaf>\xde\x00\xc3\x7f\xc3w\xae>E\xea\xed\xa4\xdcc+\x9b\xf5\x9f\x10\xa5\xe7\xc6\xc7H\xfe\xf1\xb9\x04q\xd4\xa6\x0eE\x9a\x86k\xf0oU.\xf7\xb0\x02;o\x95\x83g2)v\x93\xa1\xb5v\x1bq2\xd8\xd4\xdb\bu\rd\xb9x[\'\x12\xa4.\xc6\x96 #\xb8\xf1\"\x99\x86\v\x80\xe1\xd4\xa6\x83$\xbc\xdf\xf2\xa8\xeco\x9e\xf4\xad\x00\x00\xf1|\x1e\x13l\x96n\xc1B\xc0\xa2\xb5\xf6\xd7K\x95\x89\x16\x99\x81\x990>\xfd\xdc\x15\xd5m\xddE{\xbd\xf3 \xf7\b\xe8\x00\xa8\x9ce\x862\xd1\xb7:\xe2|iS\x13\x90\xa1\x04\x8e\xa6\xf3#\xb5\vS\xd0y}n\xb6A\xa1\xcb\x7fo\xa6\xd7\xfd\x00\x8a\xe6\xb7w.\xbb8\xe3/X\x97\xee\xb1Cf\xd4\x9e)\x98\xe2%}\xbb&$\x1908w\xe5\xe4\xc6GO1^D\x98\xa0H\xc2\xce\xbd\xda\x9eIr<6\xfa\xaeC\x02\xc7\x9a\x8d\x82\xbb\xf2 \x8e\xe8\x8aK\xc3\xf5\xcbdg;\xd6!\xf5\xf1\x0fb9\xd3#Mu\xf5\xf5 \xf1') ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 21:47:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x80000000000003, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8000000006, 0x0, 0x0, 0x1}]}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1007}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0xcd, 0x6, &(0x7f0000003700)={0x77359400}) 21:47:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) write$binfmt_aout(r0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0xffa) 21:47:36 executing program 3: socketpair(0x11, 0xa, 0x0, 0x0) 21:47:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010f90005000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:47:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='a}\xa1\xa2\v/dev/auq\x88\xe2S\xab\xc1L!\'\xf3\xa3\xd0\xd5\xae|\x0e\x19O\x94u\x16?c^N\xe8<\"=AM\x19\x9d\xedW\x82!\x86ZwxM#2+$\n\x93\x95\xd0\x90\x1a\x1bH\xd5\x1dc\x98\x98Vf=:\xe6\x97bW\x82\xee<\x15\xcaw\x19\xfe\xcd\xa6\xfd\xbf\x949\x0e\xd7\xee\x9e\xee\xc6\xbff\x9e#\x02\x93>\xf5NVS\xb6,\xb6\ay\vO\xb4\xd0g\x06%\xc6\xde|\x9d\x11\xb9\x83\x91&\xf2\x8b}\x82\xcf\xf2\xbf\xa7.\x98l{\x97\xf6\x14\x7f~\xfd7f\x16\x16}\x8a\xd5\xee\xab\xc2\vBN\x81\x89\xbbAbL\xbd\xef+\x8a\xc7\xbbh\xaf>\xde\x00\xc3\x7f\xc3w\xae>E\xea\xed\xa4\xdcc+\x9b\xf5\x9f\x10\xa5\xe7\xc6\xc7H\xfe\xf1\xb9\x04q\xd4\xa6\x0eE\x9a\x86k\xf0oU.\xf7\xb0\x02;o\x95\x83g2)v\x93\xa1\xb5v\x1bq2\xd8\xd4\xdb\bu\rd\xb9x[\'\x12\xa4.\xc6\x96 #\xb8\xf1\"\x99\x86\v\x80\xe1\xd4\xa6\x83$\xbc\xdf\xf2\xa8\xeco\x9e\xf4\xad\x00\x00\xf1|\x1e\x13l\x96n\xc1B\xc0\xa2\xb5\xf6\xd7K\x95\x89\x16\x99\x81\x990>\xfd\xdc\x15\xd5m\xddE{\xbd\xf3 \xf7\b\xe8\x00\xa8\x9ce\x862\xd1\xb7:\xe2|iS\x13\x90\xa1\x04\x8e\xa6\xf3#\xb5\vS\xd0y}n\xb6A\xa1\xcb\x7fo\xa6\xd7\xfd\x00\x8a\xe6\xb7w.\xbb8\xe3/X\x97\xee\xb1Cf\xd4\x9e)\x98\xe2%}\xbb&$\x1908w\xe5\xe4\xc6GO1^D\x98\xa0H\xc2\xce\xbd\xda\x9eIr<6\xfa\xaeC\x02\xc7\x9a\x8d\x82\xbb\xf2 \x8e\xe8\x8aK\xc3\xf5\xcbdg;\xd6!\xf5\xf1\x0fb9\xd3#Mu\xf5\xf5 \xf1') ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 21:47:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x80000000000003, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8000000006, 0x0, 0x0, 0x1}]}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1007}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0xcd, 0x6, &(0x7f0000003700)={0x77359400}) 21:47:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010f90005000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:47:36 executing program 3: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200081610000001a0ba0080080002007f196be0", 0x24) 21:47:36 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) 21:47:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010f90005000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:47:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='a}\xa1\xa2\v/dev/auq\x88\xe2S\xab\xc1L!\'\xf3\xa3\xd0\xd5\xae|\x0e\x19O\x94u\x16?c^N\xe8<\"=AM\x19\x9d\xedW\x82!\x86ZwxM#2+$\n\x93\x95\xd0\x90\x1a\x1bH\xd5\x1dc\x98\x98Vf=:\xe6\x97bW\x82\xee<\x15\xcaw\x19\xfe\xcd\xa6\xfd\xbf\x949\x0e\xd7\xee\x9e\xee\xc6\xbff\x9e#\x02\x93>\xf5NVS\xb6,\xb6\ay\vO\xb4\xd0g\x06%\xc6\xde|\x9d\x11\xb9\x83\x91&\xf2\x8b}\x82\xcf\xf2\xbf\xa7.\x98l{\x97\xf6\x14\x7f~\xfd7f\x16\x16}\x8a\xd5\xee\xab\xc2\vBN\x81\x89\xbbAbL\xbd\xef+\x8a\xc7\xbbh\xaf>\xde\x00\xc3\x7f\xc3w\xae>E\xea\xed\xa4\xdcc+\x9b\xf5\x9f\x10\xa5\xe7\xc6\xc7H\xfe\xf1\xb9\x04q\xd4\xa6\x0eE\x9a\x86k\xf0oU.\xf7\xb0\x02;o\x95\x83g2)v\x93\xa1\xb5v\x1bq2\xd8\xd4\xdb\bu\rd\xb9x[\'\x12\xa4.\xc6\x96 #\xb8\xf1\"\x99\x86\v\x80\xe1\xd4\xa6\x83$\xbc\xdf\xf2\xa8\xeco\x9e\xf4\xad\x00\x00\xf1|\x1e\x13l\x96n\xc1B\xc0\xa2\xb5\xf6\xd7K\x95\x89\x16\x99\x81\x990>\xfd\xdc\x15\xd5m\xddE{\xbd\xf3 \xf7\b\xe8\x00\xa8\x9ce\x862\xd1\xb7:\xe2|iS\x13\x90\xa1\x04\x8e\xa6\xf3#\xb5\vS\xd0y}n\xb6A\xa1\xcb\x7fo\xa6\xd7\xfd\x00\x8a\xe6\xb7w.\xbb8\xe3/X\x97\xee\xb1Cf\xd4\x9e)\x98\xe2%}\xbb&$\x1908w\xe5\xe4\xc6GO1^D\x98\xa0H\xc2\xce\xbd\xda\x9eIr<6\xfa\xaeC\x02\xc7\x9a\x8d\x82\xbb\xf2 \x8e\xe8\x8aK\xc3\xf5\xcbdg;\xd6!\xf5\xf1\x0fb9\xd3#Mu\xf5\xf5 \xf1') ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 21:47:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010f90005000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:47:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='a}\xa1\xa2\v/dev/auq\x88\xe2S\xab\xc1L!\'\xf3\xa3\xd0\xd5\xae|\x0e\x19O\x94u\x16?c^N\xe8<\"=AM\x19\x9d\xedW\x82!\x86ZwxM#2+$\n\x93\x95\xd0\x90\x1a\x1bH\xd5\x1dc\x98\x98Vf=:\xe6\x97bW\x82\xee<\x15\xcaw\x19\xfe\xcd\xa6\xfd\xbf\x949\x0e\xd7\xee\x9e\xee\xc6\xbff\x9e#\x02\x93>\xf5NVS\xb6,\xb6\ay\vO\xb4\xd0g\x06%\xc6\xde|\x9d\x11\xb9\x83\x91&\xf2\x8b}\x82\xcf\xf2\xbf\xa7.\x98l{\x97\xf6\x14\x7f~\xfd7f\x16\x16}\x8a\xd5\xee\xab\xc2\vBN\x81\x89\xbbAbL\xbd\xef+\x8a\xc7\xbbh\xaf>\xde\x00\xc3\x7f\xc3w\xae>E\xea\xed\xa4\xdcc+\x9b\xf5\x9f\x10\xa5\xe7\xc6\xc7H\xfe\xf1\xb9\x04q\xd4\xa6\x0eE\x9a\x86k\xf0oU.\xf7\xb0\x02;o\x95\x83g2)v\x93\xa1\xb5v\x1bq2\xd8\xd4\xdb\bu\rd\xb9x[\'\x12\xa4.\xc6\x96 #\xb8\xf1\"\x99\x86\v\x80\xe1\xd4\xa6\x83$\xbc\xdf\xf2\xa8\xeco\x9e\xf4\xad\x00\x00\xf1|\x1e\x13l\x96n\xc1B\xc0\xa2\xb5\xf6\xd7K\x95\x89\x16\x99\x81\x990>\xfd\xdc\x15\xd5m\xddE{\xbd\xf3 \xf7\b\xe8\x00\xa8\x9ce\x862\xd1\xb7:\xe2|iS\x13\x90\xa1\x04\x8e\xa6\xf3#\xb5\vS\xd0y}n\xb6A\xa1\xcb\x7fo\xa6\xd7\xfd\x00\x8a\xe6\xb7w.\xbb8\xe3/X\x97\xee\xb1Cf\xd4\x9e)\x98\xe2%}\xbb&$\x1908w\xe5\xe4\xc6GO1^D\x98\xa0H\xc2\xce\xbd\xda\x9eIr<6\xfa\xaeC\x02\xc7\x9a\x8d\x82\xbb\xf2 \x8e\xe8\x8aK\xc3\xf5\xcbdg;\xd6!\xf5\xf1\x0fb9\xd3#Mu\xf5\xf5 \xf1') ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) 21:47:37 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 21:47:37 executing program 3: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200081610000001a0ba0080080002007f196be0", 0x24) 21:47:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x80000000000003, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8000000006, 0x0, 0x0, 0x1}]}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1007}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0xcd, 0x6, &(0x7f0000003700)={0x77359400}) 21:47:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010f90005000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:47:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010f90005000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:47:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000a40)=""/129, 0x195}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x3, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000d80)=""/111, 0x6f}, {&(0x7f0000000a00)=""/26, 0x1a}], 0x6, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:47:37 executing program 3: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200081610000001a0ba0080080002007f196be0", 0x24) 21:47:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 21:47:37 executing program 3: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200081610000001a0ba0080080002007f196be0", 0x24) [ 498.812466] input: syz0 as /devices/virtual/input/input36 [ 498.882423] input: syz0 as /devices/virtual/input/input37 21:47:38 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 21:47:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, 0x0) stat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)) 21:47:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x4004000000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002e0007021dfffd946fa2830020200a005e00000000030000000000000000ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 21:47:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 499.237695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:47:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000100)='f', 0x1}], 0x1, 0x2) [ 499.357561] input: syz0 as /devices/virtual/input/input38 21:47:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x80000000000003, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x8000000006, 0x0, 0x0, 0x1}]}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1007}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0xcd, 0x6, &(0x7f0000003700)={0x77359400}) 21:47:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) 21:47:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000f5ffc)=0xffffffff00000003, 0x4) bind$inet6(r1, &(0x7f0000710fe4)={0xa, 0x4e21}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000000000004) connect$inet6(r1, &(0x7f0000000080), 0x1c) writev(r2, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 21:47:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 21:47:38 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 21:47:38 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x66, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) close(r0) [ 499.762447] net_ratelimit: 22 callbacks suppressed [ 499.762465] protocol 88fb is buggy, dev hsr_slave_0 [ 499.773117] protocol 88fb is buggy, dev hsr_slave_1 [ 499.799096] input: syz0 as /devices/virtual/input/input39 21:47:39 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x6}}) 21:47:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 21:47:39 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000000c0)=0x9ff5, 0x4) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) [ 500.158133] input: syz0 as /devices/virtual/input/input40 21:47:39 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x1, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x77359400}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x16) 21:47:39 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 21:47:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="2600000022004701050022008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) clone(0x102102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000240), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x1ff, 0x4) 21:47:39 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/32, 0x20}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000002180)=""/223, 0x1f4}], 0x1}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000bc0)=""/139, 0x8b}], 0x2, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/51, 0x33}], 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x11) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 21:47:39 executing program 4: unshare(0x20400) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000240)=0x371) [ 500.482604] protocol 88fb is buggy, dev hsr_slave_0 [ 500.488360] protocol 88fb is buggy, dev hsr_slave_1 21:47:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="31000000130009006900000000000010ab008048130000004600010700000014080003c0253a0000000003f50000000000", 0x31}], 0x1) [ 500.638439] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:39 executing program 1: r0 = socket(0x10, 0x802, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) [ 500.685645] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 21:47:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@rand_addr, @multicast1}, 0xc) 21:47:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 21:47:40 executing program 4: io_setup(0xffff, &(0x7f00000000c0)) [ 500.962551] protocol 88fb is buggy, dev hsr_slave_0 [ 500.968304] protocol 88fb is buggy, dev hsr_slave_1 21:47:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x398) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 501.042595] protocol 88fb is buggy, dev hsr_slave_0 [ 501.048452] protocol 88fb is buggy, dev hsr_slave_1 21:47:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000280)={0x0, 0x2000000002}) [ 501.202278] protocol 88fb is buggy, dev hsr_slave_0 [ 501.207841] protocol 88fb is buggy, dev hsr_slave_1 21:47:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x13}]}, 0x20}}, 0x0) 21:47:40 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)={0x40000001}) poll(&(0x7f0000000280)=[{r1, 0x81}], 0x1, 0x0) 21:47:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="2600000022004701050022008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) clone(0x102102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000240), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x1ff, 0x4) 21:47:40 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x112, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 21:47:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)) 21:47:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="2600000022004701050022008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) clone(0x102102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000240), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x1ff, 0x4) 21:47:40 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@rand_addr="4f6df5a08a1c0202a6cc71fb3995eaa3", @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, 0xe8) 21:47:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x11}, 0x98) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 21:47:40 executing program 2: setpriority(0x0, 0x0, 0xffffffffffffffff) 21:47:41 executing program 4: io_setup(0xffff, &(0x7f00000000c0)) 21:47:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="2600000022004701050022008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) clone(0x102102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000240), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x1ff, 0x4) 21:47:41 executing program 0: clone(0x1000000000011, &(0x7f0000000000), 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000400), 0x4, &(0x7f0000000440)) 21:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x48}}, 0x0) 21:47:41 executing program 5: unshare(0x24020400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 21:47:41 executing program 1: socketpair(0x200000000000f, 0x100000000000003, 0x2, &(0x7f0000001400)) 21:47:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000200)) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) [ 502.287595] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 21:47:41 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) writev(r0, &(0x7f00000002c0), 0x34e) 21:47:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x8, 0x0, "5e752537c5b37831627d32017a8d07b80148d1eeb9667225cb26a2ae3e86f4474aa710ee616cc8a2b62cfb7deec1b9b83be3003f8e2a24bfe2593fc6e8ee136f698385e44ad6ea6ab7be3a360c129679"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, "01d8e2a2f8120f45a579bbccac801c598def260981d976be412750d3d4e96c606a5d84ba65b8ec4bdb3f45217b03d5026db09268b0835d381c167cc3ee6b65550f650873d592973372c1e0e74f230c9e"}, 0xd8) 21:47:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04091c0007ed070001000a0000000900000000000000", 0x24) 21:47:41 executing program 3: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@llc={0x1a, 0x4888, 0x3, 0x0, 0x0, 0x0, @random="16b29a3288a8"}, 0x80, 0x0}, 0x0) 21:47:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x3a5) 21:47:42 executing program 4: io_setup(0xffff, &(0x7f00000000c0)) 21:47:42 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffe, 0x0) preadv(r0, &(0x7f0000000080)=[{0x0, 0x341}, {&(0x7f0000000100)=""/156, 0x9c}], 0x2, 0x0) 21:47:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 21:47:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x18, 0x0, 0x8000000000002) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 21:47:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff00, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r2, {0xf}}}, 0x24}}, 0x0) 21:47:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2f, 0x24}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) [ 503.252881] input: syz1 as /devices/virtual/input/input41 [ 503.361194] input: syz1 as /devices/virtual/input/input42 21:47:42 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RLOCK(r0, &(0x7f0000000000)={0xfffffffffffffd64}, 0x8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001000)) 21:47:42 executing program 1: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) read(r2, &(0x7f0000000100)=""/48, 0x29a) close(r3) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYPTR], 0x8) 21:47:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x100000000004c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000245000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) 21:47:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x3, 0x0, "b0c7b9bd822173f59c1e3718ab4c8f332688edb9679d731b968df40b5242fe96389377f38336bf4c671230bda278ae03f4d218e21f6ba0537dae68dffb0e1863df5ec693e3dcd7a4bd19fdc267405a5a"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x2, 0x0, "8b63e98a6e9a990ccccaa0722f7b17adbfb251c09e5993d319d88199f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e0b20637e2b5a8dd3403bbe1ccf681d083e2307d3f5597b00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6, 0x0, 0x9, 0x0, "064d54473753917560661b3fefc1e5220ac1f9c00410578650b29952d2e34bb776f1caff8f23aefa59201a310fe43cccc2bd202532027e530e4601c1fc9a0c805653e6dee27a9eb980ade9e0ea26c47e"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "521353f37dcd64c12799efb9dbad200b6cf433289feda8725ba79dbc26d16f9663b3df59d7b9d07abd8ae0918551393a71edeeba68925770399de3c38f23825d021cc14f2ea21c5dd607e8a85d8c9cfd"}, 0xd8) 21:47:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 21:47:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000500)='tunl0\x00') sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80000, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000380)) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) close(r3) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 503.887653] input: syz1 as /devices/virtual/input/input43 21:47:43 executing program 4: io_setup(0xffff, &(0x7f00000000c0)) 21:47:43 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) 21:47:43 executing program 2: unshare(0x8000400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) pwritev(r0, 0x0, 0xfffffffffffffefd, 0x0) 21:47:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.578789] input: syz1 as /devices/virtual/input/input44 21:47:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x17b, 0x0, 0x1b], [0xc2]}) 21:47:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0xa8, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x892, 0x4) 21:47:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r1, r0, 0x0) dup3(r4, r3, 0x0) dup3(r1, r2, 0x0) 21:47:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 504.985733] input: syz1 as /devices/virtual/input/input45 21:47:44 executing program 2: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x7ffffffffffffe) [ 505.122630] net_ratelimit: 18 callbacks suppressed [ 505.122650] protocol 88fb is buggy, dev hsr_slave_0 [ 505.133535] protocol 88fb is buggy, dev hsr_slave_1 [ 505.202505] protocol 88fb is buggy, dev hsr_slave_0 [ 505.208140] protocol 88fb is buggy, dev hsr_slave_1 21:47:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}}) [ 505.362466] protocol 88fb is buggy, dev hsr_slave_0 [ 505.368153] protocol 88fb is buggy, dev hsr_slave_1 21:47:44 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x7, @pix_mp={0x9}}) [ 505.602712] protocol 88fb is buggy, dev hsr_slave_0 [ 505.608470] protocol 88fb is buggy, dev hsr_slave_1 21:47:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x4000) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffc5}, 0x28) 21:47:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000000000000290000000b000000"], 0x10}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 21:47:44 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x5, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd]}}}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 21:47:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f66696c65300a96de86d81aacdbff37e108331616dfd5e3fb5cabfb9edb1918e864eb2df5a8de963d17"], 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66697374656d5b730200696e75787d6c3177ee76440ad2dedc6f5d20026465762f616d6900000000000000"], 0x30) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 21:47:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) read(r2, &(0x7f0000003100)=""/4096, 0x736) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x20004080) 21:47:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0xa8, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x892, 0x4) [ 506.002719] protocol 88fb is buggy, dev hsr_slave_0 [ 506.008343] protocol 88fb is buggy, dev hsr_slave_1 21:47:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) poll(&(0x7f00000001c0)=[{r2}], 0x1, 0x3f) r3 = socket$inet6(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0xe6, 0x0, 0x0, 0x1, r2}]) 21:47:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) read(r2, &(0x7f0000003100)=""/4096, 0x736) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x20004080) 21:47:45 executing program 5: r0 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0), 0x4) 21:47:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x4000) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffc5}, 0x28) 21:47:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) read(r2, &(0x7f0000003100)=""/4096, 0x736) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x20004080) 21:47:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="390000001200090417feb1ae7aa77cf40000ff3f0800000045009db9120c007b05000400410168849ef79a0a4955e91ee538d2fd0000000000", 0x39}], 0x1) 21:47:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x14, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@nested={0x0, 0x0, [@typed={0x0, 0x0, @fd}]}]}, 0x24c}}, 0x0) [ 506.714869] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:47:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x4000) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffc5}, 0x28) 21:47:46 executing program 3: mmap(&(0x7f000068a000/0x4000)=nil, 0x4000, 0x0, 0x890131, 0xffffffffffffffff, 0x0) 21:47:46 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x82, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 21:47:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0xa8, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x892, 0x4) 21:47:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) read(r2, &(0x7f0000003100)=""/4096, 0x736) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x20004080) 21:47:46 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) 21:47:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x4000) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffc5}, 0x28) 21:47:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x2287, 0x805000) 21:47:47 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c4c0d09a29b8983169914d8df86417a802b772bb638f72ccdcbb46267b5751816c77b6739f484292d5ca5e1bc4efee06f4e07e6a795faee2af27a8f21298055806494ee0e961cd5bd077bd7756f9e39dd3abdbe5c598cc5cbd44c5c319af923fbc4731545ff134749c2f42ee8454bf33ef309a6323dc847676d5be2fcb9abc717fc1e29396943ec0e264a80d64ca66ef2c42a57112a8a146097d9f4256ef6e6fd73be26e9a5f79b21dae42066d9cf4441021d64a2d6fd61c7ea709948d4be380e0fa4b76dff6aeef45", 0x1a1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 21:47:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 21:47:47 executing program 4: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = gettid() open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open$dir(&(0x7f0000e12ff8)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(0x0) fcntl$setsig(r1, 0xa, 0x12) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r4) tkill(r0, 0x16) creat(&(0x7f00001c0000)='./file0\x00', 0x0) 21:47:47 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000080)) [ 508.261765] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 508.271644] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 21:47:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0xa8, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x892, 0x4) 21:47:47 executing program 0: syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x3700b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 21:47:47 executing program 5: accept4(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000100)=0x80, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000680)={r0, r1, r0}, &(0x7f0000000600)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}, &(0x7f0000000540)}) 21:47:47 executing program 3: unshare(0x2000400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) [ 508.638785] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 508.648805] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 21:47:47 executing program 5: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x5) 21:47:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000000), 0xc, &(0x7f00008a7000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000001040501ff0080fffdffff2e0a0000000c000100010000007f0000010c000600000022ff02f10000"], 0x2c}}, 0x0) 21:47:47 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000001c0)="240000005a001f001007f4f9002304000a04f51108000100020100020800038005000000", 0x24) 21:47:48 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e00001000000000000000000000000800120000000100000000000000000006051e7dabc56b523000000000000000e000000100000006060000000000000000000000000000f9ff0020051d63da4f030006001000080002000080ac14ffbbf000000000000000030005000000000002002d041d632b91c520000000000800"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b0854f, 0x0) 21:47:48 executing program 5: pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="98", 0x1}]) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="060063efff7f00009d", 0x9}]) [ 509.076706] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 21:47:48 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x3432564e}}) [ 510.162124] net_ratelimit: 22 callbacks suppressed [ 510.162136] protocol 88fb is buggy, dev hsr_slave_0 [ 510.172956] protocol 88fb is buggy, dev hsr_slave_1 [ 510.882596] protocol 88fb is buggy, dev hsr_slave_0 [ 510.888121] protocol 88fb is buggy, dev hsr_slave_1 21:47:50 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd5, 0x0, &(0x7f00000002c0)=0xff6d) 21:47:50 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x0) bind$rds(r0, 0x0, 0x0) 21:47:50 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000004200)=""/4096, 0xffffffb2}], 0x33f, 0x0) 21:47:50 executing program 5: io_setup(0xd6, &(0x7f0000000140)=0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 21:47:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x80000000006, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0x8, @win={{}, 0x0, 0x0, &(0x7f0000000140)={{}, &(0x7f0000000100)={{}, &(0x7f00000000c0)}}, 0x0, &(0x7f0000000180)}}) 21:47:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newae={0x40, 0x1e, 0x21, 0x0, 0x0, {{@in=@loopback}, @in=@empty}}, 0x40}, 0x8}, 0x0) [ 511.362021] protocol 88fb is buggy, dev hsr_slave_0 [ 511.367479] protocol 88fb is buggy, dev hsr_slave_1 [ 511.452475] protocol 88fb is buggy, dev hsr_slave_0 [ 511.458168] protocol 88fb is buggy, dev hsr_slave_1 [ 511.495263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 21:47:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f610500020081001f00000504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 511.572578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 511.602876] protocol 88fb is buggy, dev hsr_slave_0 [ 511.608697] protocol 88fb is buggy, dev hsr_slave_1 21:47:50 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd5, 0x0, &(0x7f00000002c0)=0xff6d) 21:47:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x800000001, 0x0, @pic={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:50 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234418dd25d766070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937a, &(0x7f0000000000)) 21:47:50 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000004c0)) [ 511.824907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:47:51 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd5, 0x0, &(0x7f00000002c0)=0xff6d) 21:47:51 executing program 4: r0 = socket(0x11, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x40000020) 21:47:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0xff4b) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8000) close(r0) 21:47:51 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd5, 0x0, &(0x7f00000002c0)=0xff6d) 21:47:51 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) 21:47:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0xff4b) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8000) close(r0) 21:47:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000480)=0x24e) 21:47:52 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 21:47:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0xff4b) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8000) close(r0) 21:47:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb) close(r2) close(r1) 21:47:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 21:47:52 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) 21:47:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x800000001, 0x0, @pic={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:52 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x207ffffd) 21:47:52 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) 21:47:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0xff4b) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8000) close(r0) 21:47:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x800000001, 0x0, @pic={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 21:47:52 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000040)=0x3f4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 21:47:52 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) 21:47:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 21:47:53 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) exit(0x0) 21:47:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x800000001, 0x0, @pic={0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:53 executing program 3: r0 = gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x1000000000011, &(0x7f0000001580), 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f00006de000/0x2000)=nil, 0x2000) 21:47:53 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 21:47:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000140)) 21:47:53 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001480)={@xdp={0x2c, 0x0, 0x0, 0x3e}, {0x0}, 0x0}, 0xa0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x103, 0x2}, 0x80, &(0x7f0000000000), 0x27e, &(0x7f00000002c0)}, 0x0) 21:47:53 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)) 21:47:53 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "11e532", 0x10, 0x4, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bb08d7", 0x0, "a4e069"}}}}}}}, 0x0) 21:47:53 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x10, &(0x7f00000000c0), 0x69b) 21:47:53 executing program 4: r0 = getpid() kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 21:47:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 21:47:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 21:47:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:47:54 executing program 3: r0 = gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x1000000000011, &(0x7f0000001580), 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f00006de000/0x2000)=nil, 0x2000) 21:47:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x20, 0xaff}, 0x14}}, 0x0) 21:47:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x10001, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 21:47:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 21:47:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 515.522627] net_ratelimit: 22 callbacks suppressed [ 515.522661] protocol 88fb is buggy, dev hsr_slave_0 [ 515.533597] protocol 88fb is buggy, dev hsr_slave_1 21:47:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0xffffffffffffffff) [ 515.602419] protocol 88fb is buggy, dev hsr_slave_0 [ 515.608123] protocol 88fb is buggy, dev hsr_slave_1 21:47:54 executing program 5: r0 = add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 21:47:54 executing program 3: r0 = gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x1000000000011, &(0x7f0000001580), 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f00006de000/0x2000)=nil, 0x2000) 21:47:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 515.772520] protocol 88fb is buggy, dev hsr_slave_0 [ 515.778328] protocol 88fb is buggy, dev hsr_slave_1 21:47:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="240000000201ff0000000000000000000700000008001500000000000800080004000800"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 515.931455] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 516.002690] protocol 88fb is buggy, dev hsr_slave_0 [ 516.008451] protocol 88fb is buggy, dev hsr_slave_1 21:47:55 executing program 5: r0 = add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 21:47:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 21:47:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x34}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) [ 516.402575] protocol 88fb is buggy, dev hsr_slave_0 [ 516.408325] protocol 88fb is buggy, dev hsr_slave_1 21:47:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timerfd_create(0x1, 0x0) 21:47:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 516.707868] irq bypass consumer (token 000000001510cd4e) registration fails: -16 21:47:55 executing program 3: r0 = gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) clone(0x1000000000011, &(0x7f0000001580), 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f00006de000/0x2000)=nil, 0x2000) 21:47:55 executing program 1: socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x20000000001) 21:47:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f00000000c0)="0af51f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, &(0x7f0000002880), 0x1000) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\xda') write$FUSE_DIRENTPLUS(r1, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 21:47:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0xe0) 21:47:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x65, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x200, 0x7}, 0x8) close(r2) close(r1) 21:47:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="240000000201ff0000000000000000000700000008001500000000000800080004000800"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:47:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) 21:47:56 executing program 4: unshare(0x400) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x20000000, 0x3, 0x2}) 21:47:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0x5) fcntl$addseals(r3, 0x409, 0x8) sendfile(r3, r3, &(0x7f00000000c0), 0x9) dup3(r2, r3, 0x0) 21:47:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="67b3ed2fe015"}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 21:47:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000200)=""/214) 21:47:56 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:47:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 21:47:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000000c0)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@initdev]}, 0x18) 21:47:57 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000400)=""/91, 0x214) [ 518.095902] binder: 17126:17127 ioctl c0306201 0 returned -14 21:47:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101082) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x7530}, 0x1, 0x3a, 0x2}], 0xfde2) 21:47:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x15, &(0x7f0000000000), 0x20395dd4) 21:47:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="240000000201ff0000000000000000000700000008001500000000000800080004000800"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:47:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) 21:47:57 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @initdev}}}, 0x98) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) close(r0) 21:47:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x7) 21:47:57 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)=""/23, 0x17}, {&(0x7f00000000c0)=""/117, 0x75}], 0x2, &(0x7f0000001580)}, 0x0) 21:47:57 executing program 1: socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0xa3) 21:47:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101082) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x7530}, 0x1, 0x3a, 0x2}], 0xfde2) 21:47:57 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) sendto(r2, &(0x7f0000000100)="86", 0x1, 0xffffffffffffffff, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/124, 0xffffffd6, 0x0, &(0x7f0000001680)=@nfc, 0x93019b) tkill(r0, 0x1000000000016) 21:47:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070") 21:47:58 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x1000001c8, &(0x7f00000015c0), 0x98}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x1e, 0x0) 21:47:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)) 21:47:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x10, 0x0, 0x0) close(r3) dup3(r1, r2, 0x0) 21:47:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="240000000201ff0000000000000000000700000008001500000000000800080004000800"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 21:47:58 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ffffffc, 0x200000) close(r0) 21:47:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101082) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x7530}, 0x1, 0x3a, 0x2}], 0xfde2) 21:47:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="03f5dd7d9dae89be20f2d1fa92e9"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:47:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000080)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_map={0x712000}}) 21:47:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ffffffc, 0x200000) close(r0) 21:47:59 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb08000100101c91b5", 0x24) 21:47:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000380a176784a1eb68da63e9f893ff000000000000000000000000000000000004000038000000000100000000003830b00cc52aceac0a705fd909a2a60000002000000000004000002000000000000000000000000000000000000000007e2dc85239767cda51370d3542e9bfbbc82c70502fd87b3e72f67148881b2d1b9ad2fdcf12d0b8c783e3aa7471f0b6e6606cadc088df0e575d31ce52"], 0xa0) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60}, 0x60) [ 520.256016] sg_write: data in/out 939524060/118 bytes for SCSI command 0x0-- guessing data in; [ 520.256016] program syz-executor.1 not setting count and/or reply_len properly [ 520.304897] sg_write: data in/out 939524060/118 bytes for SCSI command 0x0-- guessing data in; [ 520.304897] program syz-executor.1 not setting count and/or reply_len properly 21:47:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ffffffc, 0x200000) close(r0) 21:47:59 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101082) write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x7530}, 0x1, 0x3a, 0x2}], 0xfde2) 21:47:59 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pread64(r0, &(0x7f0000000040), 0x0, 0x0) 21:47:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070") 21:47:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000380a176784a1eb68da63e9f893ff000000000000000000000000000000000004000038000000000100000000003830b00cc52aceac0a705fd909a2a60000002000000000004000002000000000000000000000000000000000000000007e2dc85239767cda51370d3542e9bfbbc82c70502fd87b3e72f67148881b2d1b9ad2fdcf12d0b8c783e3aa7471f0b6e6606cadc088df0e575d31ce52"], 0xa0) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60}, 0x60) [ 520.562710] net_ratelimit: 22 callbacks suppressed [ 520.562730] protocol 88fb is buggy, dev hsr_slave_0 [ 520.573581] protocol 88fb is buggy, dev hsr_slave_1 21:47:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070") [ 520.688246] sg_write: data in/out 939524060/118 bytes for SCSI command 0x0-- guessing data in; [ 520.688246] program syz-executor.1 not setting count and/or reply_len properly 21:47:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ffffffc, 0x200000) close(r0) 21:47:59 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f000000a000)) 21:48:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000380a176784a1eb68da63e9f893ff000000000000000000000000000000000004000038000000000100000000003830b00cc52aceac0a705fd909a2a60000002000000000004000002000000000000000000000000000000000000000007e2dc85239767cda51370d3542e9bfbbc82c70502fd87b3e72f67148881b2d1b9ad2fdcf12d0b8c783e3aa7471f0b6e6606cadc088df0e575d31ce52"], 0xa0) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60}, 0x60) [ 521.111286] sg_write: data in/out 939524060/118 bytes for SCSI command 0x0-- guessing data in; [ 521.111286] program syz-executor.1 not setting count and/or reply_len properly 21:48:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000002100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) 21:48:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000], 0x0, 0x8000, 0x100000001}) 21:48:00 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000380a176784a1eb68da63e9f893ff000000000000000000000000000000000004000038000000000100000000003830b00cc52aceac0a705fd909a2a60000002000000000004000002000000000000000000000000000000000000000007e2dc85239767cda51370d3542e9bfbbc82c70502fd87b3e72f67148881b2d1b9ad2fdcf12d0b8c783e3aa7471f0b6e6606cadc088df0e575d31ce52"], 0xa0) write$FUSE_STATFS(r0, &(0x7f0000000180)={0x60}, 0x60) [ 521.282605] protocol 88fb is buggy, dev hsr_slave_0 [ 521.288365] protocol 88fb is buggy, dev hsr_slave_1 [ 521.488480] sg_write: data in/out 939524060/118 bytes for SCSI command 0x0-- guessing data in; [ 521.488480] program syz-executor.1 not setting count and/or reply_len properly 21:48:00 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/186, 0x31ece1e26bdc29c1) getdents(r0, 0x0, 0x0) 21:48:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41001010}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000400000000d000005f967b6d90000004000fa00000000004000030000010000000000000025000000ffb0ffff04040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38d, 0x0, 0x390}]}) 21:48:00 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f000000a000)) [ 521.763010] protocol 88fb is buggy, dev hsr_slave_0 [ 521.768673] protocol 88fb is buggy, dev hsr_slave_1 [ 521.842759] protocol 88fb is buggy, dev hsr_slave_0 [ 521.848469] protocol 88fb is buggy, dev hsr_slave_1 [ 522.012812] protocol 88fb is buggy, dev hsr_slave_0 [ 522.018684] protocol 88fb is buggy, dev hsr_slave_1 21:48:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070") 21:48:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070") 21:48:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x14}}) 21:48:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002780)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000000)="b997000040b800000000ba000000800f3066bad004b099eeb9240b00000f320f07c4c1fb10ad00000000b922030000b803280000ba000000000f309a0a000000760066ba4100ecf20f2a5f060f01f1", 0x4f}], 0x1, 0x0, 0x0, 0xffffffffffffff81) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) getsockname$netlink(r0, 0x0, 0x0) 21:48:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000080)=0x0) close(r0) socket$inet6(0xa, 0x802, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x930000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) 21:48:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xb) 21:48:01 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f000000a000)) 21:48:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002780)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000000)="b997000040b800000000ba000000800f3066bad004b099eeb9240b00000f320f07c4c1fb10ad00000000b922030000b803280000ba000000000f309a0a000000760066ba4100ecf20f2a5f060f01f1", 0x4f}], 0x1, 0x0, 0x0, 0xffffffffffffff81) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x200000000000077, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_TSC_KHZ(r3, 0xaead, 0x0) 21:48:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002780)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000000)="b997000040b800000000ba000000800f3066bad004b099eeb9240b00000f320f07c4c1fb10ad00000000b922030000b803280000ba000000000f309a0a000000760066ba4100ecf20f2a5f060f01f1", 0x4f}], 0x1, 0x0, 0x0, 0xffffffffffffff81) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 21:48:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070") 21:48:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002780)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000000)="b997000040b800000000ba000000800f3066bad004b099eeb9240b00000f320f07c4c1fb10ad00000000b922030000b803280000ba000000000f309a0a000000760066ba4100ecf20f2a5f060f01f1", 0x4f}], 0x1, 0x0, 0x0, 0xffffffffffffff81) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x1500) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070") 21:48:02 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f000000a000)) 21:48:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 21:48:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setrlimit(0x7, &(0x7f0000000000)) inotify_init1(0x0) 21:48:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 21:48:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) capset(&(0x7f0000000000), 0x0) 21:48:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x7, {0x8}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x30}}, 0x0) 21:48:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="8e", 0x1}], 0x1}, 0x8000) sendmsg$unix(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000d40)="df40f1001884f67a282e32ab7a28ebd29d91176780853320d6bfc47bf9feea9e9470284f91cdc996d2bdd7c04dadbaa7a3adbda024db4ed6c9dbfc1502355de83ebfdfabf27c988fb8081acaa355dfb0b0f5483409b6765269dcdb62d20e95b9fe926fcfffdb88b670d1f2400509959f452ae363e202dd8e1bd1bbc15ea6dc6be96ce0ce6ff1f497bd82bba8986216bb8ac69becd8073e1946c9e412b75c0b5c12beab22b685b2739a610f4371b37be4cd63a17026ec6ff7129a825dd859b320787cd2edf008d2d577d42ce652b87fa29266ad59edc78503e1aa12c2694aba0352578eab564cb3270ae1e4d5d56983330e1518ae4c1da7e3d551a47faa3ac3fb1e6700177683757ed02f2cb4898b76b020a38b8d8c1197f41b97558f7a31cbbc54d761dd7560b777cb70710fedded9cae0a6e1cb449828afb359986906b291a21820ae67beab7c44ed3ce3cee8443c403c560577d93a79c7cf76de2c87bcf94d5334175476143596f6a9203b22a33b2cafe7f4c815febbb2bd6e5f361d4f888a5b4de1c6c17b436c4cbeb51da368d610b691de7b6070cf526fca68e225dbf0a884c0cde6d7c283e9f6ab6af4959b75bcbfd39889b64f8b9f2572241c58a82eefb3e02355ababf2c42faefbae8f76e8a0c1eaeebeef1f8ec4bdb3917ab96f28731792bcb2ee4af22d56e892eb84e4b389fee4e208f90476f034e92b5b9adce9bce85c0648c28c96906d0d5289a1f56841842183cae10ce4583cce38f188e144cae7aa07637bd177e14769664b6e296e696e3a8b1e40db6888776a9ef663a1c033b72d4f4d2e09c2414cde777019b4a1922733a18b884c46f05630a84786dc241c802e571dfbd0b4a2f602225854728e96df6a9c98d9a9340c56bb24193a0c41cf9cd7378596de958d6f952fade4d8f62c3718ed05a20f520c4849d4b852015115cf953cd1f7f8ff885a8a950b38058ba09ecdf4d69d4d14edc6d20e3c022a54734f2ea397653f05fb7118b22925ed47741a9743065788390e95eb7059546be2d10ca1b85eafe4b64c46785b29dccf2bb339b27f94ba2d6339f63afa4a479041c648a907988eac781052442c9c0f16c0b71f89cc2c343284a82bef6b2be35415e0be570f73d3b3e25c2c69b48aa90783d6319403f52a01d4588b592ccf95292dc0c1fde6e26bf30372695b3f7360e6d4cf49d0db9b6bd6ec9793f05d21aaddafbff9284b180ffeca172083e531d2fd8d44bf0cbbe32f93c4d03a4c919d8a1f2fe36e404811f89121ff7dc8ca11f713d722767ea37b1dbf8e49e708ff3660757a0f4de580acb11e543f492b17bcfd8f418e6cd50c160b71c0cffe38b61cc73152dfd5b5216aebd2e40a96e60e30df3e57035b43f7b89620f1c36ad14fd079ae78a3c2fb5e05819af586cc4b0813c22b7b9862eb1c19cf7f362617ae5b8105cc78b073079956573d165ae4612e8fe5bc4c019ae032bee7194c9e82766085453d05749743de77d726f6b457269efaa2ccf4d6caad15ff9361779f0fbee36efad17b9b68ee47f23f1d2f2b411e45b0b449b32ba5a306dfe7e1e3375c95b7d94f49a2bd2b4f189e2801665aa5e57afe16131f34e17cf32d24f35607e558746d1216c774eec76f37b5a7740c3aa09700c6f8899e1efa5f88ed611998691bbe2db2b7478e4fc5ccd185e001da275e7818ea0208a242ee7109f8f70faa6ff1729e9921abc2bcc3f208e6c013b7d121910a8f56c83249714dfb141fdf3ac5baff483c210df4db92c88e972bae6159997f33a96fdbafbbb0010014d4a73dcfa1035b1513414b2d9fbc1411cf0790b1acba9386916d177d68de36a46b2adc2cf29d31ba3a309b2f3d7798fded14beb635a086728cb2200bdb49360011348c9fc77ff265849d0178830bc5e34aaebe186be8c03e2685b54ee783011fa35626663b688c40f60ffbd4ac3b948c5ff2357b8832c6ef1001c146f87b4dd0adaa914a11115e532bf3dd8bf1f0c7e0064f837199e31e7496edf909f2bc9a398a00ff6566702d29f4b94a9c04dccb7cf0d383f4a98f1e138787905f2b6137a7717894ca858023f699c102ca8e078007c30e302e5523459b27656bce78a6219bab914e0363be1b2abf3a37739283468c351f5c0290ccf65b134484727e0ee64e2575956958cfdfa9237e28953c5cb21f6813f069e75d01eb56a1ad203ab6c885d29e06c967c981c5d87043cc9fd2c9098876c1c23a227d6f113d8bde27f50db8eeb17e8f05061934eb30741c6ae0cbd0f59801d7a8db421ee11d00ec959cda441971c56c73eced8cb6d6f8bce73eda3f35fd3a8795ca4e498df7a9db076a23add8fd75acdc0d7703f585980424705373c76102b7e80bb32a4702be8aa0f0832958a65e425407ddf0f03155e751e4fcb768b5411eaa172576dc1f5feea2e4c3ad60282f19ab82de68b544b2e078c98a390ecb1d7a4583963615cda37fbebb2b735ecbf489a2c2355c639b53323eaf5cc80fb7cbee9a638414b35e5831d21a71a7a6ce8978c1bd7faea3a293493f5093c74fff9cf4e271b9e1b1c6c117064655a92f1383e1dc86f72297195e7113429c88998970275a7259d88d0abab41a9ae7e9e8c33c7cc1825f9f7d05181ea7b68d3966500b180e39af89109bec241d6af59f773268a2db04f0565f2c4b9fa9a9aea94caa22712606727eface54609a1de2466a122a2d24c685887a2927e6539f6711c297b3ab4c628004b61591744e5b7065a85301c937da7137c7497a419665d3cdd717beca2a14450375a57f3d6a52049f0d8e1b7c8637581b86d7f40b2a3670229f96a4b84b7172ef69778bab5bc59a37e4a0152f8ba3d6c22af359956f859c32c3e23c8d6cc137cc495ca545efd8e8e6c90f1d325fc78d79cefefa5d0d9e97617b2ac23207e0d007353302beab76f7053fe4ca2274066753a3b491501e874d19b85f42d90521211e8802e7d61835dd481ae78cd3e6769c1812c47e4c3861271d0845c6cc48b8de73e30178972c8e04b2aefcba63e8eee2d30838302881d08a5eb3679c5000ddf047f70c4d8555712e80485274893ba8cb4bee3d9af43363266abc2bd4644fa23696c506084edc615856c24026b9b166976b342b32fb54192b65fdaa2baaa579f85355c83610de71aaed3e9c8431b717a1fcda6d61677b44923a9d4815b147d481e5122fb3fc764de44920144280c6c2756875027cb01baf386299e658fd3a3ecd1ec5e97dfa85f3aef5d92224919449b127fe9f43f62aeb8f509b0a2dc749843e69982ded9c41d14bf789aa436db5e648864ce8147a8835b006d05d5e0fa50b3d7c2147334f0b4afaace4ace8e49b3b7d84badc35258674feed00e6d626376a8b50766bf55066a908cdeb92bd888ac8668116764bb7e7bf5554b14bf19cd5a2cf9499c950376fd67ab972374978d6f8ff8760567e60c8f2fac80ab87acffb94805956a8f2b58f1b4d0f2ef9a796e7af41b49cde24b0056a9abfa6ce5935f261efa70620504f664ab9a398654c07ae95d05880a068dfb98c1bf698610eab3829969cca2fcefc845e8afc4cc7753a77cc5cfb0e3916079cdd5fa6e0d3bf8fe247c62b7e0676ca0b8b14e1b59ab090d8ac7695673f2b145f59c1860c97ec4ea6da4d26cc7edcad492f8b9ddfb786b4ffa29fc4418d3917d2b2f4ea8d2d638ede27d6b2fed7936f3f236d94a6e68ceab27ccd676f7adca3d5a87dbd8e213a54a5d307c6e05f2224fd6f5ac7fc1d1836eec4e45a4e71c803eefe0b84f8aec4c5685bcf9cb51835f62edfc594387c6d65a33cf572482b1a6fbebdf03219b4104e99f716888a482d9696a53b15b0968c604698ad931dd4f52b16b6385654f4c6f04ec52224b51575503e0a1c48bc60314123d535f8df3749d11ff0a86d0b34b54de49fddc765cd25bd51e80d63490dea4a53047584da65230160aac94727212cc5dcae6322011688f368f53422e7078d71f679b2fb56b001cbe437f1128be144550ad1ffcb5d9d4f09850a47002290c9a36648d628942ee558f2db6a29e5f468cd888087b2f3f58aaf65b6fc14fed0ae2951548f4bb47a87af1f7885067bffe4c629809a9251ed746196839e56dfb2b2cf9e57fa066524564c108dbff6d129e562ba2c2e7d873c0d09d439f5952e3b1b79abb1e11b85c992be2cdee595f1978b1270e0b917ba7c7a25b9b969d4df0199ac8a167cd164bf6eb30a94933bfb87bdc4cbd1e824fe13255cd41f8424e8127d50b9b547399b01cd5d10945ecd94adfd07e3f26acfc2306eb8a899aa1ba455ad8b45e4263e1ee32eeeb04cb0171cc4dce6ded45dcb2dcc1ab31cadbaf741cfb714741e62ff0126c68d5d03b4dbf0403c80d2e520b91ba6ff67159dda8978d8e9f3ebda29806cc57d0995a101df61313b01cdfce4a057622a69b77dd7b6f15b2ee09ae57c96ec0afc268dc45ddde7bd5f9070177f0d512b44923a34593ba12b8fbd739f1502d27c02d4bb570aabedcc0159a9ec7dc78442d29f7c9b2b9eae58dde4045af06f0ac153e0bcc82483c392cafaa18263dff21939d1e199738c7c7e813e8f3e482892961f4fce3677f8f519563f7f91dd5c3186e46b22655b8f5913bdac88af2b3795c616135adfa37cd2add8e5ab8852fd51d1f8fb3cd529974a0113a043d965b3fadc9f2d7598ccc4cfb5a446835c6cb1874b7ac494ec6161ada925237e8c677b9f23f7316955030fec08c006d99743181577770597794c703c2281605607de00f164781f58be0be5", 0xd25}], 0x1, 0x0, 0x0, 0x4}, 0x4004005) [ 524.564034] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 21:48:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000040)=0xfffffffffffffc99) [ 524.652185] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 21:48:03 executing program 4: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_FLOW={0x8, 0xb, 0x1}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:48:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120009000e0001000000000006000500fc00", 0x2e}], 0x1}, 0x0) 21:48:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28}, 0x28) 21:48:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000), 0x4) 21:48:04 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x11}], 0x10}}], 0x1, 0x0) [ 525.407333] IPv6: NLM_F_CREATE should be specified when creating new route 21:48:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 21:48:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x32f00}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x30, 0x829, 0x0, 0x0, {0x2803}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0) 21:48:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x81) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000042f5b6030100000000eb0000000120e74d561944407d26ad7587f02d45ec1f176c040000a400000094a8dc28aa"]}) 21:48:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120009000e0001000000000006000500fc00", 0x2e}], 0x1}, 0x0) 21:48:04 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x7f) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 21:48:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001700)={0x20, r1, 0x51d, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) 21:48:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) kcmp(r1, r1, 0x0, r0, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000014) open$dir(&(0x7f0000000200)='./file0\x00', 0x27e, 0x0) 21:48:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000480)={0x981900}) [ 525.922397] net_ratelimit: 18 callbacks suppressed [ 525.922494] protocol 88fb is buggy, dev hsr_slave_0 [ 525.933222] protocol 88fb is buggy, dev hsr_slave_1 21:48:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120009000e0001000000000006000500fc00", 0x2e}], 0x1}, 0x0) [ 526.012323] protocol 88fb is buggy, dev hsr_slave_0 [ 526.018109] protocol 88fb is buggy, dev hsr_slave_1 21:48:05 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xe259, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x9, 0x36314d59}) [ 526.172677] protocol 88fb is buggy, dev hsr_slave_0 [ 526.178541] protocol 88fb is buggy, dev hsr_slave_1 21:48:05 executing program 1: r0 = socket$inet(0x2, 0x800000000803, 0x4) sendmmsg(r0, &(0x7f000000f9c0)=[{{&(0x7f00000060c0)=@un=@abs, 0x80, &(0x7f00000062c0)}}, {{&(0x7f000000d180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="43d5ba8a4b91"}, 0x80, 0x0}}], 0x2, 0x0) 21:48:05 executing program 3: unshare(0x20400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 21:48:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x43, 0x0, &(0x7f0000001080)) 21:48:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120009000e0001000000000006000500fc00", 0x2e}], 0x1}, 0x0) [ 526.402431] protocol 88fb is buggy, dev hsr_slave_0 [ 526.408099] protocol 88fb is buggy, dev hsr_slave_1 21:48:05 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) [ 526.461576] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 21:48:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80080084121, &(0x7f0000007fff)) 21:48:05 executing program 3: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) close(r0) 21:48:05 executing program 5: r0 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000000000)="b63db85e1e8d020000feff00003ef0011dcc606aed5ed2bc7018cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) [ 526.802332] protocol 88fb is buggy, dev hsr_slave_0 [ 526.807988] protocol 88fb is buggy, dev hsr_slave_1 21:48:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x9) 21:48:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd2e, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001640)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) capset(0x0, &(0x7f0000000080)={0x0, 0x41e49f14}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000540)={[{}, {0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:06 executing program 1: unshare(0x20400) r0 = socket(0x10, 0x10000000000003, 0x0) connect(r0, &(0x7f0000002700)=@xdp, 0x80) 21:48:06 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 21:48:06 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000019007faf37c0f2b2a4a280930a60011000a843dc90052369390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 21:48:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x8000802) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x100000}) 21:48:06 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 21:48:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffffffff7fff}, 0x8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x4b1, &(0x7f0000003b80), 0x0, &(0x7f0000000200)}}], 0x44b, 0x0) dup3(r3, r2, 0x80000000000) close(r3) close(r2) 21:48:06 executing program 1: socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) 21:48:06 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x200000000000001, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0xd, &(0x7f0000000140)=""/116, &(0x7f00000001c0)=0x74) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) close(r0) 21:48:06 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000083c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000f1c000/0x3000)=nil) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x600000, 0x3, &(0x7f0000000000/0x600000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000388000/0x2000)=nil, 0x2000) 21:48:06 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 21:48:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd2e, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001640)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) capset(0x0, &(0x7f0000000080)={0x0, 0x41e49f14}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000540)={[{}, {0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:06 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000083c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000f1c000/0x3000)=nil) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x600000, 0x3, &(0x7f0000000000/0x600000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000388000/0x2000)=nil, 0x2000) 21:48:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap$perf(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) ustat(0x0, 0x0) mkdir(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000140), 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="fc00000048000700ab092500090007000aab0800000000000000e29321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc000200ffffffff000000002fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c8b170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a", 0xf5) r0 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="9b2075572467"}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x102, 0x370) sendto$inet6(r0, &(0x7f00000000c0)="030300000300600000000000fff5", 0xe, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2040) 21:48:07 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 21:48:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffffffff7fff}, 0x8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x4b1, &(0x7f0000003b80), 0x0, &(0x7f0000000200)}}], 0x44b, 0x0) dup3(r3, r2, 0x80000000000) close(r3) close(r2) 21:48:07 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000083c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000f1c000/0x3000)=nil) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x600000, 0x3, &(0x7f0000000000/0x600000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000388000/0x2000)=nil, 0x2000) 21:48:07 executing program 0: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) 21:48:07 executing program 3: r0 = socket$inet(0x10, 0x10000000003, 0x9) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000fa0307041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000005304ffffba16a0aa1c0009b3", 0x34}], 0x1}, 0x0) [ 528.412724] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:48:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd2e, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001640)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) capset(0x0, &(0x7f0000000080)={0x0, 0x41e49f14}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000540)={[{}, {0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.458134] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.461266] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:48:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000080)=r0, 0x29b) recvmsg(r0, &(0x7f0000002b40)={0x0, 0x2, 0x0, 0x0, 0x0, 0x313}, 0x10002) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="e0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="d4", 0x1}], 0x1}, 0x0) close(r1) 21:48:07 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000083c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000f1c000/0x3000)=nil) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x600000, 0x3, &(0x7f0000000000/0x600000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000388000/0x2000)=nil, 0x2000) 21:48:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffffffff7fff}, 0x8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x4b1, &(0x7f0000003b80), 0x0, &(0x7f0000000200)}}], 0x44b, 0x0) dup3(r3, r2, 0x80000000000) close(r3) close(r2) 21:48:07 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7ff, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 21:48:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x6}}, @IFA_ADDRESS={0x14}]}, 0x40}}, 0x0) 21:48:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd2e, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001640)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) capset(0x0, &(0x7f0000000080)={0x0, 0x41e49f14}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000540)={[{}, {0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 21:48:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x5, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 21:48:08 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800400000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00006bc000), &(0x7f0000060ffc), 0x0) 21:48:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffffffff7fff}, 0x8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x4b1, &(0x7f0000003b80), 0x0, &(0x7f0000000200)}}], 0x44b, 0x0) dup3(r3, r2, 0x80000000000) close(r3) close(r2) 21:48:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:08 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0) 21:48:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x5, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 21:48:08 executing program 4: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) pselect6(0x10, &(0x7f0000000100)={0xfff}, 0x0, 0x0, 0x0, 0x0) 21:48:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x5, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 21:48:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:09 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0046d00, 0x0) 21:48:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x5, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 21:48:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:09 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) 21:48:09 executing program 3: rt_sigprocmask(0x0, 0x0, &(0x7f0000000480), 0x8) 21:48:09 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$unix(r2, &(0x7f00000000c0)="b1", 0x1, 0x0, 0x0, 0x0) 21:48:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:09 executing program 0: r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000000000)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c400000000000", 0x22) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/200, 0xc8}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) [ 530.962594] net_ratelimit: 26 callbacks suppressed [ 530.962613] protocol 88fb is buggy, dev hsr_slave_0 [ 530.973507] protocol 88fb is buggy, dev hsr_slave_1 21:48:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:10 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty, @remote, @dev}}}}, 0x0) 21:48:10 executing program 5: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'\x00\x00\x00\x80\x00\x00\xff\x05\x00\x01\x00', @ifru_settings={0x0, 0x5, @cisco=&(0x7f0000000040)}}) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 21:48:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000001340)=0xc) 21:48:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0xd, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9ab78eb2"}, 0x0, 0x0, @offset, 0x4}) 21:48:10 executing program 0: r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000000000)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c400000000000", 0x22) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/200, 0xc8}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 21:48:10 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 21:48:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:10 executing program 2: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x0, @mcast2, 0x2}, 0xfffffffffffffe77) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x4, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r5 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000580)=0x8, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000480)=0x1, 0x4) sendfile(r2, r2, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) signalfd4(r4, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101800, 0x0) socket(0x0, 0x7, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000640)=ANY=[]) 21:48:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 531.682563] protocol 88fb is buggy, dev hsr_slave_0 [ 531.688341] protocol 88fb is buggy, dev hsr_slave_1 21:48:10 executing program 0: r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000000000)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c400000000000", 0x22) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/200, 0xc8}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 21:48:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r1, &(0x7f0000005c00)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x1, 0x0) [ 532.162404] protocol 88fb is buggy, dev hsr_slave_0 [ 532.168068] protocol 88fb is buggy, dev hsr_slave_1 [ 532.242645] protocol 88fb is buggy, dev hsr_slave_0 [ 532.248519] protocol 88fb is buggy, dev hsr_slave_1 21:48:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "369fa6c4a9cae205679ac2415d2b06d12773cee5142e8e4f2e04c5562907f7c5b583fa19739ea515baf7aba17147f34f01127e6acc19f6705fe6042a4b7ade90", "4b63ab7b67eb8a1a9f23bfcef20828ed86e060ddacfc3d0eaf4331d1bb1e8edad4d198642bcf54321be3e332da563c3ea76f1a2d1470a9c0f564139503a0ed47", "3067cd4b7b8d9c2d9da7744d5fdace03498ba8e7ea837ce1e8f82d86d04b0c8b"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000140)=""/75, 0x4b) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000440)=""/117) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fstat(r6, &(0x7f0000002a40)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, &(0x7f0000002a00)={0x77359400}) getpeername$packet(r1, &(0x7f0000003e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003ec0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x5e) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@local, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0xfff, 0x4e21, 0x8, 0x0, 0x80, 0x20, 0x7f, r8, r9}, {0x200, 0x7, 0x20, 0x9, 0x1, 0x86b, 0x8, 0x7}, {0x6, 0x8, 0x101, 0x2}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d3, 0x7e}, 0xa, @in6=@remote, 0x3503, 0x5, 0x0, 0x9, 0xff, 0x4, 0x4}}, 0xe8) sendto$inet6(r4, &(0x7f0000000000), 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64], 0xfe5b) signalfd(r3, &(0x7f0000000000)={0x1}, 0x8) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000240)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) socket(0x10, 0x802, 0x0) close(r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x1000000002, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r10, 0x40047459, &(0x7f0000000240)=""/174) pread64(r10, &(0x7f0000000800)=""/240, 0xf0, 0x0) 21:48:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote}], 0x1c) close(0xffffffffffffffff) 21:48:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r1, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r1, 0x0) 21:48:11 executing program 0: r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000000000)="220000005e000721004f10f7d0ebd900000000003c0253573d9a047c400000000000", 0x22) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/208, 0xd0}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/200, 0xc8}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 21:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'md4-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000008a80)=[{{&(0x7f0000008640)=@xdp, 0xf, &(0x7f0000008800), 0x2b, &(0x7f0000008840), 0xf00}}], 0x4000000000002e5, 0x0) [ 532.402282] protocol 88fb is buggy, dev hsr_slave_0 [ 532.407950] protocol 88fb is buggy, dev hsr_slave_1 21:48:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x400007) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)) 21:48:11 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept(r0, 0x0, 0x0) 21:48:11 executing program 4: mkdir(&(0x7f000000e000)='./control\x00', 0x0) r0 = inotify_init() r1 = epoll_create(0x1001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001d00)) r2 = inotify_add_watch(r0, &(0x7f00005eaff6)='./control\x00', 0x8) inotify_rm_watch(r0, r2) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 21:48:11 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:11 executing program 2: r0 = socket$inet(0x2b, 0x8000000000801, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) 21:48:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000900)=[@increfs, @transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 21:48:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000080)="0a5c1f023c126285719070") r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xf, 0x5) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x80123, 0x6}) 21:48:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0xa0) [ 533.147038] binder: 17776:17781 got reply transaction with no transaction stack [ 533.154953] binder: 17776:17781 transaction failed 29201/-71, size 0-0 line 2801 21:48:12 executing program 3: unshare(0x2020000) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x200000) ioctl(r0, 0x80000000, &(0x7f0000000180)="7bcb01340cc7bfe31ae4a35dba512f27029c0b85adb13496a44e7aa1d81810e0644369bf5baa093bf98aa5ce9b609b8402bfcbde027db3b05cc085c7f6e5272812fb8d1987989fbc30bb53e18be91a2e04254a95ff6403a35cc71b92573106f71367de28f3465a5123e5d39ea806b1cc113548af546f1d2736e635e036033d3fd6a198dd35de752051c9bc1677e52feec531885cda7677dc191d27422e0246baaa7e8f7f0c5f95887f6b4ad0") mknod(&(0x7f0000000280)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='personality\x00@i\xf7\x9b\xf6\xd67\x94\xbdAZ\xcb\xdeL\\Y\x01c\xd7\x05\x00\x00\x00\x00\x00\x00\xc3\x87\xa7\nN\xb8\xcf.\x81\x93N\xeb*?C\x9e\xa2\x9e\xddiG\xfd\x94@\xe3\x89U\xfe\xf4\xb3S1\x81\xd8\xb1\xef\xe6\xbd}\xaf\x7f~+h?8\xad\xa3\xd9\xb8\xfd\xa9\xc2\x14]9\x01\x87\x15n%R\xe6\x1f\x1e\x869\x96\xe9ta3\x7fY\x16\x8b\xdc\x18\xefYZ\xb8\x13\x96o\x99\x1dv;\xce\xc4\xd2\x92\x82\xc6\xbc\xach\xbd\xb0\x82\xe7\x95d\xa4l\xa3CqD\xe9\x90:U\xf7X[\x86D\x91\xf5\x9c\xe3\xce\xe9&\xa0\x96\xe3\x0e\xc14ym\xaa\x8ea>\xf7\xf4\xe6!\xaeB\x8b\xed#\xd1\xef\x9e\x10?\xdb\xa8\xa5\xaf<\xfd\x97/[\x88\v\xfc\x8b\xf8\x80\xf33\xb2%-\xc5bR\v\x88\xa4/\x1a\x11\x99\x1e\xd7\xf8\x8bHH\xd7\xc5\x1e\x15\x1c%<\xf4\xa7\x18\x93\xc3\a\xbe]i\xce\x04\xc8\xe6\x03G\xdf\xc3\x1fg\x8cS\xf9\xb1\x19#\xe8\x98\xeei\x8c\x947\x1a[\xa1\xae}2\xe45\xa0\x93\te\x83:\xba\xc4\xc0Y') ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x2, 0x95, "5d9c3d85941899be7f77222512a7a1c7662adc30b90a5da3a635bfc9118d5af173ee1999f9528ebc1ddcdadd002298a9144dc67421ef5cc59287a19f17a65a871cb1678341910e8aa237cb6bf587a15a3a61c8acac2588dafc0f168397d1aceb9123db14ed8b975e87009418f7f334bd3bfe0895dc419b278a6fa1add04671de2404832ec5b5c107f8a80a4c613e08389d6c966be4"}) read$alg(r1, 0x0, 0x0) readv(r1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x401, 0x0) 21:48:12 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8913, &(0x7f0000000200)='lo:&\xa8yQ\xb1H\xa9\xc8J,`\xd2\x98\x00\x00\x00 V`\x9a\x0fy\x8aX\xc1m\xf8;\xe7\x11\x1eL2\xfb\xcb\xa7\xa4\x1e\xdc\x86\xd6\xe2\x06?\xe0\x85\xcb\xd4XRr\xae\xc1\x91}\xc0\xf5d\x06b\xa0\xb3\xdc\xfe^\b\b\x9b\x88\xff9\xac\x88\x03\xe6t\xd58\x9c\x1cB\xa9\xa6(\x99qC\x95/\a\xd35\xe4\xfb\xe9D\x9e\xf6NB>\x17\xcd9|\x95\xab\x9fC\xcd\x03\x1b\fb\x96\xec\xe5b !\r\xdf\xbe\xb75\xb9z0e\xd2}QZ\x05@\xfc&\xd3{') [ 533.248361] binder: undelivered TRANSACTION_ERROR: 29201 21:48:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x11}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 21:48:12 executing program 2: socket$xdp(0x2c, 0x3, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000140)={0x8}, &(0x7f0000000200), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 21:48:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/4096) 21:48:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 21:48:12 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00c3c6726261a1ae138404", 0xc}], 0x1}, 0x0) 21:48:12 executing program 2: unshare(0x8000400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r3) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x6, 0x6, 0x9, 0xffff}, 0x7}, 0xa) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 21:48:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x1}, {0x80000008, 0x0, 0x7}]}) 21:48:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0) 21:48:13 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="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", 0xfc) 21:48:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x2, 0x36}) [ 534.149908] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 534.158957] ip6gretap0: FDB only supports static addresses 21:48:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}, 0x0, 0xfffffffffffffffd}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x100000001}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 21:48:13 executing program 5: ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x3}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 21:48:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 21:48:13 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="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", 0xfc) [ 534.545835] syz-executor.2 (17818) used greatest stack depth: 53120 bytes left [ 534.671613] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 534.680387] ip6gretap0: FDB only supports static addresses 21:48:13 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @start}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r1, r0, 0x0) 21:48:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 21:48:13 executing program 2: unshare(0x8000400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r3) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x6, 0x6, 0x9, 0xffff}, 0x7}, 0xa) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 21:48:13 executing program 1: unshare(0x8000400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r3) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x6, 0x6, 0x9, 0xffff}, 0x7}, 0xa) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 21:48:13 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r1) 21:48:14 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="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", 0xfc) 21:48:14 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000d80)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250300000008990039966a7d5c037dc1250200000000000007496e6866856b76b5020000000000000000060000000118fa1efd9b0b"}, 0x20000048}}, 0x0) 21:48:14 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r1) [ 535.305965] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 535.314912] ip6gretap0: FDB only supports static addresses 21:48:14 executing program 3: unshare(0x40600) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/205, 0x13d) getdents(r0, 0x0, 0x0) 21:48:14 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="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", 0xfc) 21:48:14 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYBLOB="25f6fb8f3736c1c087946ee9ae81000000000000"], 0x0) 21:48:14 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r1) 21:48:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000100), 0x14ded905162a6c92, 0x0, 0x0, 0xfffffffffffffec6) recvfrom(r2, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) [ 535.752282] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 535.761128] ip6gretap0: FDB only supports static addresses 21:48:14 executing program 2: unshare(0x8000400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r3) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x6, 0x6, 0x9, 0xffff}, 0x7}, 0xa) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 21:48:14 executing program 1: unshare(0x8000400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r3) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x6, 0x6, 0x9, 0xffff}, 0x7}, 0xa) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 21:48:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100323, 0x6}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x80045515, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 21:48:15 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) 21:48:15 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r1) [ 536.332469] net_ratelimit: 18 callbacks suppressed [ 536.332488] protocol 88fb is buggy, dev hsr_slave_0 [ 536.343215] protocol 88fb is buggy, dev hsr_slave_1 [ 536.402460] protocol 88fb is buggy, dev hsr_slave_0 [ 536.408192] protocol 88fb is buggy, dev hsr_slave_1 21:48:15 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100323, 0x6}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x80045515, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 21:48:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0xf0ffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff87, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 536.562740] protocol 88fb is buggy, dev hsr_slave_0 [ 536.568574] protocol 88fb is buggy, dev hsr_slave_1 21:48:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4001) 21:48:15 executing program 1: unshare(0x8000400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r3) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x6, 0x6, 0x9, 0xffff}, 0x7}, 0xa) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) [ 536.806404] protocol 88fb is buggy, dev hsr_slave_0 [ 536.812301] protocol 88fb is buggy, dev hsr_slave_1 21:48:16 executing program 2: unshare(0x8000400) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x840, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) socket$inet(0x2, 0x1, 0x3) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") close(r3) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, 0x0, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8b", 0x1, 0x4000101, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) write(r1, &(0x7f0000000ec0)="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", 0x595) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000600)={0x1f, {0x8, 0x1, 0x6, 0x6, 0x9, 0xffff}, 0x7}, 0xa) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 21:48:16 executing program 0: clone(0x2102801ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x78) [ 537.202203] protocol 88fb is buggy, dev hsr_slave_0 [ 537.207849] protocol 88fb is buggy, dev hsr_slave_1 21:48:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000002700)={0x1, 0x0, [0x10000040000021, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:48:16 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100323, 0x6}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x80045515, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 21:48:16 executing program 5: clock_gettime(0xffffffbffffffffc, &(0x7f0000000280)) 21:48:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00y\x00\x05\x00', 0x806}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 21:48:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00\xff\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 21:48:16 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e000000120081aee4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060003000000", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/180, 0xb4}, {&(0x7f0000000240)=""/228, 0x6c2}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/208, 0xd0}, {&(0x7f0000001440)=""/238, 0xee}], 0x5}, 0x0) 21:48:17 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') sendfile(r0, r1, 0x0, 0xffffffff) [ 537.948644] xt_nfacct: accounting object `syz1' does not exists 21:48:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000400052d425910040050000d90000004000fa000000000040000300000100000054571cd5fa94d773ffb0ffff04040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x390, 0x0, 0x400004403000}]}) 21:48:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100323, 0x6}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0x80045515, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 21:48:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001440)={0xa, 0x4e22}, 0x1c) arch_prctl$ARCH_GET_FS(0x1003, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x11a, 0x20000005, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) recvfrom$inet6(r3, &(0x7f0000000040)=""/31, 0x1f, 0x0, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) dup2(r1, r3) 21:48:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000480)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) 21:48:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xd, 0x401) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x80323, 0xd932}) 21:48:17 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 538.582501] vhci_hcd: invalid port number 50 [ 538.587220] vhci_hcd: invalid port number 50 21:48:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000004c0)={0x0, 0x4, 0x20, 0x4, 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = inotify_init1(0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r6 = dup2(r2, r5) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x7}, 0x1c) mq_timedsend(r7, &(0x7f00000001c0)="699ae565186743717edf4040feff400576d6dacf0a377d05b5ba33d516b583509a97312982f32238c4ffc7ae381310e354cd2552a5912b46867a6b3cec9d6f1495e22f647a7c5e3efbf66593f1c5f2c6de6bcdd35dc5cb9e46a27504a1116618797d81604c723494150a0ae6acbdb988de70d4679f34fb02040c8684e78327a52dcf7318d2145dc9d531d57d24ea4baf03a0bafed35623c3f5c7a33b8b4ef817948ebcdb9d6a72eb2c7289e9e914c639bf8112a250d6b8ed0de625b8943181ae827a8b42c56f6e1bf2ecf4a0f7", 0xcd, 0x800, &(0x7f0000000100)={r9, r10+30000000}) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) mq_open(&(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80000001}) clock_gettime(0x0, &(0x7f0000000300)) sendmsg$can_bcm(r5, &(0x7f0000000440)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000c0010000000000006003000000b752cc7450387cebb763ceb4839cff7ff7c36da46b9bad7214c113c0c3abe4d578dbbe49d2567e7dc2d1b358a9df4dfb5d2699ef5a8a80042330ac020ab21fabe3e7c0bb59ef2853c833cd47c38a45cd93d7675ae3af2727126d5cefc806000000ba188e225fef5cdb12d728eed89e347e41ce4add63f866b79f4910b3f8b7ccf90c53f5a03bcae7ca6386c65702e00c3c018d1b32792dcbe716ba7fff65b8ba4971ec00fd7965b1d39479e0abf55f00000000000000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000667869d4f0b66a652ccf8c22e742c707c71fc6494af41d53f0187fa567ab75"], 0x1) 21:48:17 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x102000007, 0x800000000008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000460000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080), 0x2, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0x242d, &(0x7f0000631000/0x1000)=nil, 0x3) 21:48:18 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4b2809302000000030343026c26236925000400fe000000022dca8a9848a3c728f1c46b7b39afdc1338d544000000000000f75ae593de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) recvmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000002900)=@nfc_llcp, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/200, 0xc8}}, {{&(0x7f0000004380)=@sco, 0x80, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=""/80, 0x50}}], 0x2, 0x0, &(0x7f0000005cc0)={0x77359400}) 21:48:18 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 21:48:18 executing program 3: syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300030, 0x3a, 0xf0ffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 21:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00\xff\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) [ 539.318159] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 539.325985] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 21:48:18 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 539.390089] xt_nfacct: accounting object `syz1' does not exists [ 539.424823] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 539.432607] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 21:48:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00\xff\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 21:48:18 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4b2809302000000030343026c26236925000400fe000000022dca8a9848a3c728f1c46b7b39afdc1338d544000000000000f75ae593de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) recvmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000002900)=@nfc_llcp, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/200, 0xc8}}, {{&(0x7f0000004380)=@sco, 0x80, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=""/80, 0x50}}], 0x2, 0x0, &(0x7f0000005cc0)={0x77359400}) 21:48:18 executing program 3: socketpair$unix(0x1, 0x100000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000002700)={0x1, 0x0, [0x10000040000021, 0x9]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:48:18 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 21:48:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000004c0)={0x0, 0x4, 0x20, 0x4, 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = inotify_init1(0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r6 = dup2(r2, r5) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x7}, 0x1c) mq_timedsend(r7, &(0x7f00000001c0)="699ae565186743717edf4040feff400576d6dacf0a377d05b5ba33d516b583509a97312982f32238c4ffc7ae381310e354cd2552a5912b46867a6b3cec9d6f1495e22f647a7c5e3efbf66593f1c5f2c6de6bcdd35dc5cb9e46a27504a1116618797d81604c723494150a0ae6acbdb988de70d4679f34fb02040c8684e78327a52dcf7318d2145dc9d531d57d24ea4baf03a0bafed35623c3f5c7a33b8b4ef817948ebcdb9d6a72eb2c7289e9e914c639bf8112a250d6b8ed0de625b8943181ae827a8b42c56f6e1bf2ecf4a0f7", 0xcd, 0x800, &(0x7f0000000100)={r9, r10+30000000}) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) mq_open(&(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80000001}) clock_gettime(0x0, &(0x7f0000000300)) sendmsg$can_bcm(r5, &(0x7f0000000440)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000c0010000000000006003000000b752cc7450387cebb763ceb4839cff7ff7c36da46b9bad7214c113c0c3abe4d578dbbe49d2567e7dc2d1b358a9df4dfb5d2699ef5a8a80042330ac020ab21fabe3e7c0bb59ef2853c833cd47c38a45cd93d7675ae3af2727126d5cefc806000000ba188e225fef5cdb12d728eed89e347e41ce4add63f866b79f4910b3f8b7ccf90c53f5a03bcae7ca6386c65702e00c3c018d1b32792dcbe716ba7fff65b8ba4971ec00fd7965b1d39479e0abf55f00000000000000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000667869d4f0b66a652ccf8c22e742c707c71fc6494af41d53f0187fa567ab75"], 0x1) [ 539.799768] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 539.807460] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 539.893619] xt_nfacct: accounting object `syz1' does not exists 21:48:19 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4b2809302000000030343026c26236925000400fe000000022dca8a9848a3c728f1c46b7b39afdc1338d544000000000000f75ae593de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) recvmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000002900)=@nfc_llcp, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/200, 0xc8}}, {{&(0x7f0000004380)=@sco, 0x80, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=""/80, 0x50}}], 0x2, 0x0, &(0x7f0000005cc0)={0x77359400}) [ 540.257286] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 540.264958] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 21:48:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf1200b0eba0b4d65cdbaa98cbb30007fff00000000e00000051894d5d1dac", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) 21:48:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00\xff\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00', 0x19, 0x1, 0x1d0, [0x20000080, 0x2000000000000000, 0x0, 0x200000b0, 0x20000220], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @remote, [], 0x108, 0x108, 0x140, [@limit={'limit\x00', 0x20, {{0x0, 0xde}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x248) 21:48:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) unshare(0x20400) setsockopt$inet_int(r0, 0x0, 0x40000000000ce, 0x0, 0x0) 21:48:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) accept4(r0, 0x0, 0x0, 0x0) 21:48:19 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4b2809302000000030343026c26236925000400fe000000022dca8a9848a3c728f1c46b7b39afdc1338d544000000000000f75ae593de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) recvmmsg(r0, &(0x7f0000005b40)=[{{&(0x7f0000002900)=@nfc_llcp, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/200, 0xc8}}, {{&(0x7f0000004380)=@sco, 0x80, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=""/80, 0x50}}], 0x2, 0x0, &(0x7f0000005cc0)={0x77359400}) 21:48:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000004c0)={0x0, 0x4, 0x20, 0x4, 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = inotify_init1(0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r6 = dup2(r2, r5) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x7}, 0x1c) mq_timedsend(r7, &(0x7f00000001c0)="699ae565186743717edf4040feff400576d6dacf0a377d05b5ba33d516b583509a97312982f32238c4ffc7ae381310e354cd2552a5912b46867a6b3cec9d6f1495e22f647a7c5e3efbf66593f1c5f2c6de6bcdd35dc5cb9e46a27504a1116618797d81604c723494150a0ae6acbdb988de70d4679f34fb02040c8684e78327a52dcf7318d2145dc9d531d57d24ea4baf03a0bafed35623c3f5c7a33b8b4ef817948ebcdb9d6a72eb2c7289e9e914c639bf8112a250d6b8ed0de625b8943181ae827a8b42c56f6e1bf2ecf4a0f7", 0xcd, 0x800, &(0x7f0000000100)={r9, r10+30000000}) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) mq_open(&(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80000001}) clock_gettime(0x0, &(0x7f0000000300)) sendmsg$can_bcm(r5, &(0x7f0000000440)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000c0010000000000006003000000b752cc7450387cebb763ceb4839cff7ff7c36da46b9bad7214c113c0c3abe4d578dbbe49d2567e7dc2d1b358a9df4dfb5d2699ef5a8a80042330ac020ab21fabe3e7c0bb59ef2853c833cd47c38a45cd93d7675ae3af2727126d5cefc806000000ba188e225fef5cdb12d728eed89e347e41ce4add63f866b79f4910b3f8b7ccf90c53f5a03bcae7ca6386c65702e00c3c018d1b32792dcbe716ba7fff65b8ba4971ec00fd7965b1d39479e0abf55f00000000000000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000667869d4f0b66a652ccf8c22e742c707c71fc6494af41d53f0187fa567ab75"], 0x1) 21:48:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="a79de75d37c82925a016613f6c11f2be1fd7c737085818a27cc6178e8a17e1f9e66a40cef89f96a6b67aaa1dfe17d4ed2bec108dd001925a36d47ad9e63e274c61246ee8b4de6bb5", 0x48}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00K\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\b\x00'}) writev(r0, &(0x7f00000002c0), 0x10000000000000e4) [ 540.971472] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 540.979206] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 541.005848] xt_nfacct: accounting object `syz1' does not exists 21:48:20 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x3, 0x0) creat(&(0x7f00000002c0)='./file0//ile0\x00', 0x0) [ 541.162853] input: syz1 as /devices/virtual/input/input49 21:48:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x4, 0xb}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r1, 0x0, &(0x7f000089b000)}, 0x18) [ 541.209936] input: syz1 as /devices/virtual/input/input50 21:48:20 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x8000000939, 0x4) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000100), 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) [ 541.362242] net_ratelimit: 23 callbacks suppressed [ 541.362262] protocol 88fb is buggy, dev hsr_slave_0 [ 541.372858] protocol 88fb is buggy, dev hsr_slave_1 21:48:20 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) close(r1) 21:48:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f0000000080)=0x600) 21:48:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="a79de75d37c82925a016613f6c11f2be1fd7c737085818a27cc6178e8a17e1f9e66a40cef89f96a6b67aaa1dfe17d4ed2bec108dd001925a36d47ad9e63e274c61246ee8b4de6bb5", 0x48}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00K\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\b\x00'}) writev(r0, &(0x7f00000002c0), 0x10000000000000e4) 21:48:20 executing program 1: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x1, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1}, 0x0) [ 541.757927] input: syz1 as /devices/virtual/input/input51 21:48:20 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@routing, 0x8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000840)="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", 0x599, 0xc001, &(0x7f0000000200), 0x1c) sendto$inet6(r0, &(0x7f0000000100)="d6596ece0bc36e30d237e849", 0xc, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 21:48:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvfrom$inet6(r3, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15) r4 = openat$cgroup_int(r2, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x3, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="44003f000000000000000000e4000000000001000000000800000000080003000e0000000800040b070000000800060000000000", @ANYRES32=r9], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000100)=r11) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="fe8000000000000000000000000000aa00000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffff000000ff000000ffffff0074756e6c300000000000000000000000726f7365300000000000000000000000000000000000000000ff00000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000a700000251000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000300000000000000280052454a454354000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000000000000000f10d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b801000000000000000000000000000000000000000000000000380074696d6500000000000000000000000000000000000000000000000000000000000003000000494e010084090100000000000302000090007372680000000000000000000000000000000000000000000000000000013b000509070000000000000000000000000000000000000000000000000000000000000000000001fe80000000000000000000000000001cff000000ffffffffffffffffffffff00ffffffff00000000ffffffff000000ff000000ffffffffffffffffffff0000000820431400000000280052454a45435400000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r9}) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001e0007f1fff57f02000200000005010053d6445f89390836be381a", 0x1f) sendfile(r4, r4, 0x0, 0xf9f4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 21:48:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="a79de75d37c82925a016613f6c11f2be1fd7c737085818a27cc6178e8a17e1f9e66a40cef89f96a6b67aaa1dfe17d4ed2bec108dd001925a36d47ad9e63e274c61246ee8b4de6bb5", 0x48}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00K\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\b\x00'}) writev(r0, &(0x7f00000002c0), 0x10000000000000e4) [ 542.082279] protocol 88fb is buggy, dev hsr_slave_0 [ 542.087955] protocol 88fb is buggy, dev hsr_slave_1 21:48:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000004c0)={0x0, 0x4, 0x20, 0x4, 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = inotify_init1(0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r3, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r6 = dup2(r2, r5) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x7}, 0x1c) mq_timedsend(r7, &(0x7f00000001c0)="699ae565186743717edf4040feff400576d6dacf0a377d05b5ba33d516b583509a97312982f32238c4ffc7ae381310e354cd2552a5912b46867a6b3cec9d6f1495e22f647a7c5e3efbf66593f1c5f2c6de6bcdd35dc5cb9e46a27504a1116618797d81604c723494150a0ae6acbdb988de70d4679f34fb02040c8684e78327a52dcf7318d2145dc9d531d57d24ea4baf03a0bafed35623c3f5c7a33b8b4ef817948ebcdb9d6a72eb2c7289e9e914c639bf8112a250d6b8ed0de625b8943181ae827a8b42c56f6e1bf2ecf4a0f7", 0xcd, 0x800, &(0x7f0000000100)={r9, r10+30000000}) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) mq_open(&(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80000001}) clock_gettime(0x0, &(0x7f0000000300)) sendmsg$can_bcm(r5, &(0x7f0000000440)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000c0010000000000006003000000b752cc7450387cebb763ceb4839cff7ff7c36da46b9bad7214c113c0c3abe4d578dbbe49d2567e7dc2d1b358a9df4dfb5d2699ef5a8a80042330ac020ab21fabe3e7c0bb59ef2853c833cd47c38a45cd93d7675ae3af2727126d5cefc806000000ba188e225fef5cdb12d728eed89e347e41ce4add63f866b79f4910b3f8b7ccf90c53f5a03bcae7ca6386c65702e00c3c018d1b32792dcbe716ba7fff65b8ba4971ec00fd7965b1d39479e0abf55f00000000000000000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000667869d4f0b66a652ccf8c22e742c707c71fc6494af41d53f0187fa567ab75"], 0x1) 21:48:21 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) close(r1) 21:48:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x1e, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8) close(r2) close(r1) 21:48:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045006, &(0x7f00000004c0)=0x100000035) read$FUSE(r1, &(0x7f0000000500), 0x20001500) read$FUSE(r1, &(0x7f0000001500), 0x1000) [ 542.359609] input: syz1 as /devices/virtual/input/input52 [ 542.562397] protocol 88fb is buggy, dev hsr_slave_0 [ 542.568073] protocol 88fb is buggy, dev hsr_slave_1 21:48:21 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) close(r1) [ 542.642539] protocol 88fb is buggy, dev hsr_slave_0 [ 542.648216] protocol 88fb is buggy, dev hsr_slave_1 21:48:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)="a79de75d37c82925a016613f6c11f2be1fd7c737085818a27cc6178e8a17e1f9e66a40cef89f96a6b67aaa1dfe17d4ed2bec108dd001925a36d47ad9e63e274c61246ee8b4de6bb5", 0x48}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00\x00\x00\x00\x00\x00K\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\b\x00'}) writev(r0, &(0x7f00000002c0), 0x10000000000000e4) [ 542.802704] protocol 88fb is buggy, dev hsr_slave_0 [ 542.808557] protocol 88fb is buggy, dev hsr_slave_1 21:48:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x44}}, 0x0) [ 542.935512] input: syz1 as /devices/virtual/input/input53 21:48:22 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x1020, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) close(r1) 21:48:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/140) 21:48:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="56b4a5f58b00"}, 0x14) socket$inet6(0xa, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000200)={0x7}, 0x7) [ 546.722297] net_ratelimit: 18 callbacks suppressed [ 546.727334] protocol 88fb is buggy, dev hsr_slave_0 [ 546.732671] protocol 88fb is buggy, dev hsr_slave_1 [ 546.802284] protocol 88fb is buggy, dev hsr_slave_0 [ 546.807702] protocol 88fb is buggy, dev hsr_slave_1 [ 546.972077] protocol 88fb is buggy, dev hsr_slave_0 [ 546.977508] protocol 88fb is buggy, dev hsr_slave_1 [ 547.202502] protocol 88fb is buggy, dev hsr_slave_0 [ 547.208143] protocol 88fb is buggy, dev hsr_slave_1 [ 547.602530] protocol 88fb is buggy, dev hsr_slave_0 [ 547.608184] protocol 88fb is buggy, dev hsr_slave_1 [ 551.762545] net_ratelimit: 22 callbacks suppressed [ 551.767584] protocol 88fb is buggy, dev hsr_slave_0 [ 551.773143] protocol 88fb is buggy, dev hsr_slave_1 [ 552.482432] protocol 88fb is buggy, dev hsr_slave_0 [ 552.488067] protocol 88fb is buggy, dev hsr_slave_1 [ 552.962052] protocol 88fb is buggy, dev hsr_slave_0 [ 552.967669] protocol 88fb is buggy, dev hsr_slave_1 [ 553.042201] protocol 88fb is buggy, dev hsr_slave_0 [ 553.047855] protocol 88fb is buggy, dev hsr_slave_1 [ 553.202021] protocol 88fb is buggy, dev hsr_slave_0 [ 553.207439] protocol 88fb is buggy, dev hsr_slave_1 [ 557.122390] net_ratelimit: 18 callbacks suppressed [ 557.127426] protocol 88fb is buggy, dev hsr_slave_0 [ 557.132773] protocol 88fb is buggy, dev hsr_slave_1 [ 557.202131] protocol 88fb is buggy, dev hsr_slave_0 [ 557.207625] protocol 88fb is buggy, dev hsr_slave_1 [ 557.362427] protocol 88fb is buggy, dev hsr_slave_0 [ 557.367866] protocol 88fb is buggy, dev hsr_slave_1 [ 557.602229] protocol 88fb is buggy, dev hsr_slave_0 [ 557.607876] protocol 88fb is buggy, dev hsr_slave_1 [ 558.002189] protocol 88fb is buggy, dev hsr_slave_0 [ 558.007836] protocol 88fb is buggy, dev hsr_slave_1 [ 562.162128] net_ratelimit: 22 callbacks suppressed [ 562.162141] protocol 88fb is buggy, dev hsr_slave_0 [ 562.172577] protocol 88fb is buggy, dev hsr_slave_1 [ 562.882162] protocol 88fb is buggy, dev hsr_slave_0 [ 562.887992] protocol 88fb is buggy, dev hsr_slave_1 [ 563.362379] protocol 88fb is buggy, dev hsr_slave_0 [ 563.367846] protocol 88fb is buggy, dev hsr_slave_1 [ 563.442348] protocol 88fb is buggy, dev hsr_slave_0 [ 563.447800] protocol 88fb is buggy, dev hsr_slave_1 [ 563.602363] protocol 88fb is buggy, dev hsr_slave_0 [ 563.607816] protocol 88fb is buggy, dev hsr_slave_1 [ 567.522028] net_ratelimit: 18 callbacks suppressed [ 567.522040] protocol 88fb is buggy, dev hsr_slave_0 [ 567.532669] protocol 88fb is buggy, dev hsr_slave_1 [ 567.601978] protocol 88fb is buggy, dev hsr_slave_0 [ 567.607324] protocol 88fb is buggy, dev hsr_slave_1 [ 567.762032] protocol 88fb is buggy, dev hsr_slave_0 [ 567.767557] protocol 88fb is buggy, dev hsr_slave_1 [ 568.002255] protocol 88fb is buggy, dev hsr_slave_0 [ 568.007751] protocol 88fb is buggy, dev hsr_slave_1 [ 568.402176] protocol 88fb is buggy, dev hsr_slave_0 [ 568.407641] protocol 88fb is buggy, dev hsr_slave_1 [ 572.562524] net_ratelimit: 22 callbacks suppressed [ 572.567537] protocol 88fb is buggy, dev hsr_slave_0 [ 572.572946] protocol 88fb is buggy, dev hsr_slave_1 [ 573.282460] protocol 88fb is buggy, dev hsr_slave_0 [ 573.288231] protocol 88fb is buggy, dev hsr_slave_1 [ 573.761999] protocol 88fb is buggy, dev hsr_slave_0 [ 573.767367] protocol 88fb is buggy, dev hsr_slave_1 [ 573.842013] protocol 88fb is buggy, dev hsr_slave_0 [ 573.847400] protocol 88fb is buggy, dev hsr_slave_1 [ 574.002183] protocol 88fb is buggy, dev hsr_slave_0 [ 574.007902] protocol 88fb is buggy, dev hsr_slave_1 [ 577.922036] net_ratelimit: 18 callbacks suppressed [ 577.927084] protocol 88fb is buggy, dev hsr_slave_0 [ 577.932568] protocol 88fb is buggy, dev hsr_slave_1 [ 578.002055] protocol 88fb is buggy, dev hsr_slave_0 [ 578.007538] protocol 88fb is buggy, dev hsr_slave_1 [ 578.162015] protocol 88fb is buggy, dev hsr_slave_0 [ 578.167525] protocol 88fb is buggy, dev hsr_slave_1 [ 578.402080] protocol 88fb is buggy, dev hsr_slave_0 [ 578.407668] protocol 88fb is buggy, dev hsr_slave_1 [ 578.802207] protocol 88fb is buggy, dev hsr_slave_0 [ 578.807829] protocol 88fb is buggy, dev hsr_slave_1 [ 582.962190] net_ratelimit: 22 callbacks suppressed [ 582.967418] protocol 88fb is buggy, dev hsr_slave_0 [ 582.973116] protocol 88fb is buggy, dev hsr_slave_1 [ 583.682167] protocol 88fb is buggy, dev hsr_slave_0 [ 583.687872] protocol 88fb is buggy, dev hsr_slave_1 [ 584.162127] protocol 88fb is buggy, dev hsr_slave_0 [ 584.167508] protocol 88fb is buggy, dev hsr_slave_1 [ 584.242033] protocol 88fb is buggy, dev hsr_slave_0 [ 584.247521] protocol 88fb is buggy, dev hsr_slave_1 [ 584.402084] protocol 88fb is buggy, dev hsr_slave_0 [ 584.407865] protocol 88fb is buggy, dev hsr_slave_1 [ 588.322024] net_ratelimit: 18 callbacks suppressed [ 588.327181] protocol 88fb is buggy, dev hsr_slave_0 [ 588.332638] protocol 88fb is buggy, dev hsr_slave_1 [ 588.401987] protocol 88fb is buggy, dev hsr_slave_0 [ 588.407731] protocol 88fb is buggy, dev hsr_slave_1 [ 588.562403] protocol 88fb is buggy, dev hsr_slave_0 [ 588.567985] protocol 88fb is buggy, dev hsr_slave_1 [ 588.802087] protocol 88fb is buggy, dev hsr_slave_0 [ 588.807664] protocol 88fb is buggy, dev hsr_slave_1 [ 589.202052] protocol 88fb is buggy, dev hsr_slave_0 [ 589.207618] protocol 88fb is buggy, dev hsr_slave_1 [ 593.362068] net_ratelimit: 22 callbacks suppressed [ 593.362079] protocol 88fb is buggy, dev hsr_slave_0 [ 593.372503] protocol 88fb is buggy, dev hsr_slave_1 [ 594.082410] protocol 88fb is buggy, dev hsr_slave_0 [ 594.088127] protocol 88fb is buggy, dev hsr_slave_1 [ 594.562092] protocol 88fb is buggy, dev hsr_slave_0 [ 594.567477] protocol 88fb is buggy, dev hsr_slave_1 [ 594.642016] protocol 88fb is buggy, dev hsr_slave_0 [ 594.649616] protocol 88fb is buggy, dev hsr_slave_1 [ 594.802035] protocol 88fb is buggy, dev hsr_slave_0 [ 594.807757] protocol 88fb is buggy, dev hsr_slave_1 [ 598.722013] net_ratelimit: 18 callbacks suppressed [ 598.722033] protocol 88fb is buggy, dev hsr_slave_0 [ 598.732676] protocol 88fb is buggy, dev hsr_slave_1 [ 598.802196] protocol 88fb is buggy, dev hsr_slave_0 [ 598.807563] protocol 88fb is buggy, dev hsr_slave_1 [ 598.961964] protocol 88fb is buggy, dev hsr_slave_0 [ 598.967515] protocol 88fb is buggy, dev hsr_slave_1 [ 599.202204] protocol 88fb is buggy, dev hsr_slave_0 [ 599.207747] protocol 88fb is buggy, dev hsr_slave_1 [ 599.602109] protocol 88fb is buggy, dev hsr_slave_0 [ 599.607641] protocol 88fb is buggy, dev hsr_slave_1 21:49:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvfrom$inet6(r3, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15) r4 = openat$cgroup_int(r2, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x3, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="44003f000000000000000000e4000000000001000000000800000000080003000e0000000800040b070000000800060000000000", @ANYRES32=r9], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000100)=r11) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r9}) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001e0007f1fff57f02000200000005010053d6445f89390836be381a", 0x1f) sendfile(r4, r4, 0x0, 0xf9f4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 21:49:21 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 21:49:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) 21:49:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045006, &(0x7f00000004c0)=0x100000035) read$FUSE(r1, &(0x7f0000000500), 0x20001500) read$FUSE(r1, &(0x7f0000001500), 0x1000) 21:49:21 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000200)="240000005e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 21:49:21 executing program 3: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) rmdir(&(0x7f0000000580)='./file0\x00') 21:49:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvfrom$inet6(r3, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15) r4 = openat$cgroup_int(r2, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x3, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="44003f000000000000000000e4000000000001000000000800000000080003000e0000000800040b070000000800060000000000", @ANYRES32=r9], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000100)=r11) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r9}) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001e0007f1fff57f02000200000005010053d6445f89390836be381a", 0x1f) sendfile(r4, r4, 0x0, 0xf9f4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 21:49:21 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000280)=0x7fff, 0x3, 0x0) msync(&(0x7f00004e4000/0x1000)=nil, 0x1000, 0x0) 21:49:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000efc0)={&(0x7f0000000000), 0xc, &(0x7f000000ef80)={&(0x7f000000eb40)={0x14}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r1, &(0x7f00000002c0), 0x492492492492640, 0x400c011) 21:49:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0xf, 0x8012, r0, 0x0) [ 603.088146] bridge0: port 3(veth1_to_team) entered blocking state [ 603.094771] bridge0: port 3(veth1_to_team) entered disabled state [ 603.102440] device veth1_to_team entered promiscuous mode [ 603.108628] bridge0: port 3(veth1_to_team) entered blocking state [ 603.115005] bridge0: port 3(veth1_to_team) entered forwarding state 21:49:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0xf, 0x8012, r0, 0x0) 21:49:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045006, &(0x7f00000004c0)=0x100000035) read$FUSE(r1, &(0x7f0000000500), 0x20001500) read$FUSE(r1, &(0x7f0000001500), 0x1000) [ 603.762643] net_ratelimit: 22 callbacks suppressed [ 603.762664] protocol 88fb is buggy, dev hsr_slave_0 [ 603.773806] protocol 88fb is buggy, dev hsr_slave_1 [ 604.482504] protocol 88fb is buggy, dev hsr_slave_0 [ 604.488334] protocol 88fb is buggy, dev hsr_slave_1 [ 604.962593] protocol 88fb is buggy, dev hsr_slave_0 [ 604.968551] protocol 88fb is buggy, dev hsr_slave_1 [ 605.042460] protocol 88fb is buggy, dev hsr_slave_0 [ 605.048181] protocol 88fb is buggy, dev hsr_slave_1 [ 605.153597] IPVS: ftp: loaded support on port[0] = 21 [ 605.202219] protocol 88fb is buggy, dev hsr_slave_0 [ 605.207972] protocol 88fb is buggy, dev hsr_slave_1 [ 605.269891] chnl_net:caif_netlink_parms(): no params data found [ 605.313121] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.319557] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.327692] device bridge_slave_0 entered promiscuous mode [ 605.336136] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.342781] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.350563] device bridge_slave_1 entered promiscuous mode [ 605.377456] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 605.388495] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 605.412054] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 605.420303] team0: Port device team_slave_0 added [ 605.426687] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 605.434722] team0: Port device team_slave_1 added [ 605.440768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 605.450434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 605.514818] device hsr_slave_0 entered promiscuous mode [ 605.552034] device hsr_slave_1 entered promiscuous mode [ 605.592525] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 605.599793] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 605.623619] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.630158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.637549] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.644197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.715439] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 605.721763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.733902] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 605.747145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.756545] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.764287] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.774300] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 605.790313] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 605.796681] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.809281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.818354] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.825082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.844422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.853410] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.859955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.891239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 605.900356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 605.928167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 605.939676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.958455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.971344] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 605.978972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.004911] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 606.036108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.274445] bridge0: port 3(veth1_to_team) entered blocking state [ 606.281102] bridge0: port 3(veth1_to_team) entered disabled state [ 606.289906] device veth1_to_team entered promiscuous mode [ 606.296739] bridge0: port 3(veth1_to_team) entered blocking state [ 606.303248] bridge0: port 3(veth1_to_team) entered forwarding state 21:49:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvfrom$inet6(r3, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15) r4 = openat$cgroup_int(r2, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x3, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="44003f000000000000000000e4000000000001000000000800000000080003000e0000000800040b070000000800060000000000", @ANYRES32=r9], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000100)=r11) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r9}) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001e0007f1fff57f02000200000005010053d6445f89390836be381a", 0x1f) sendfile(r4, r4, 0x0, 0xf9f4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 21:49:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000a90000/0x4000)=nil) 21:49:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0xf, 0x8012, r0, 0x0) 21:49:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045006, &(0x7f00000004c0)=0x100000035) read$FUSE(r1, &(0x7f0000000500), 0x20001500) read$FUSE(r1, &(0x7f0000001500), 0x1000) 21:49:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvfrom$inet6(r3, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15) r4 = openat$cgroup_int(r2, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x3, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="44003f000000000000000000e4000000000001000000000800000000080003000e0000000800040b070000000800060000000000", @ANYRES32=r9], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000100)=r11) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r9}) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001e0007f1fff57f02000200000005010053d6445f89390836be381a", 0x1f) sendfile(r4, r4, 0x0, 0xf9f4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 21:49:26 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000280)=0x7fff, 0x3, 0x0) msync(&(0x7f00004e4000/0x1000)=nil, 0x1000, 0x0) 21:49:26 executing program 3: geteuid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000f6dfe0)=[{&(0x7f0000000000)="a8", 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f00005d5ff2)=[{&(0x7f00005d5fff)=';', 0x1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000040)=""/184, 0xb8) 21:49:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0xf, 0x8012, r0, 0x0) 21:49:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}}, 0x0) 21:49:27 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 21:49:27 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x101002, 0x0) read(r0, &(0x7f0000000300)=""/166, 0xa6) ioctl$int_in(r0, 0x4800000c004500a, &(0x7f0000000040)=0xfffffffffffffffe) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) 21:49:27 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x3}) 21:49:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvfrom$inet6(r3, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15) r4 = openat$cgroup_int(r2, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x3, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="44003f000000000000000000e4000000000001000000000800000000080003000e0000000800040b070000000800060000000000", @ANYRES32=r9], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000100)=r11) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="fe8000000000000000000000000000aa00000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffff000000ff000000ffffff0074756e6c300000000000000000000000726f7365300000000000000000000000000000000000000000ff00000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000a700000251000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000300000000000000280052454a454354000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000000000000000f10d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009001b801000000000000000000000000000000000000000000000000380074696d6500000000000000000000000000000000000000000000000000000000000003000000494e010084090100000000000302000090007372680000000000000000000000000000000000000000000000000000013b000509070000000000000000000000000000000000000000000000000000000000000000000001fe80000000000000000000000000001cff000000ffffffffffffffffffffff00ffffffff00000000ffffffff000000ff000000ffffffffffffffffffff0000000820431400000000280052454a45435400000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r9}) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001e0007f1fff57f02000200000005010053d6445f89390836be381a", 0x1f) sendfile(r4, r4, 0x0, 0xf9f4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 21:49:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x6, 0x0) sendmmsg(r1, &(0x7f0000003d40), 0x40000000000008b, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) recvfrom$inet6(r3, &(0x7f0000000040)=""/72, 0xfffffffffffffd62, 0x2001, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x101}, 0x15) r4 = openat$cgroup_int(r2, &(0x7f0000002340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000001d40)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000007c0)=""/121, 0x79}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/103, 0x67}], 0x8}, 0x188573df}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000001bc0)=""/37, 0x25}, {&(0x7f0000001c00)=""/98, 0x62}], 0x3, &(0x7f0000001cc0)=""/81, 0x51}, 0x200}], 0x2, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x4031, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0xf76925ac}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001540)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="44003f000000000000000000e4000000000001000000000800000000080003000e0000000800040b070000000800060000000000", @ANYRES32=r9], 0x2}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000100)=r11) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0xd0, @ipv4={[], [], @multicast1}, 0x6}, {0xa, 0x4e21, 0x27de, @local, 0x9}, 0x4, [0x8, 0x9, 0x40, 0x10000000, 0x58f2, 0x6, 0xfffffffffffffffa, 0x44]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', r9}) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000001e0007f1fff57f02000200000005010053d6445f89390836be381a", 0x1f) sendfile(r4, r4, 0x0, 0xf9f4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') 21:49:27 executing program 3: r0 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, r1+30000000}, 0xfffffffffffffffd) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x40000000016) 21:49:27 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000600)="2400000021002551071c01d68c00dc228200000000100f000ee1000c0800160003000000", 0x24) 21:49:28 executing program 3: r0 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, r1+30000000}, 0xfffffffffffffffd) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x40000000016) [ 609.122593] net_ratelimit: 28 callbacks suppressed [ 609.122612] protocol 88fb is buggy, dev hsr_slave_0 [ 609.133459] protocol 88fb is buggy, dev hsr_slave_1 [ 609.202483] protocol 88fb is buggy, dev hsr_slave_0 [ 609.208152] protocol 88fb is buggy, dev hsr_slave_1 [ 609.362434] protocol 88fb is buggy, dev hsr_slave_0 [ 609.368116] protocol 88fb is buggy, dev hsr_slave_1 [ 609.602353] protocol 88fb is buggy, dev hsr_slave_0 [ 609.607999] protocol 88fb is buggy, dev hsr_slave_1 [ 610.002747] protocol 88fb is buggy, dev hsr_slave_0 [ 610.008524] protocol 88fb is buggy, dev hsr_slave_1 21:49:29 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000280)=0x7fff, 0x3, 0x0) msync(&(0x7f00004e4000/0x1000)=nil, 0x1000, 0x0) 21:49:29 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x8000008010500d, 0x0) 21:49:29 executing program 3: r0 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, r1+30000000}, 0xfffffffffffffffd) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x40000000016) 21:49:29 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000013000)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) close(r2) 21:49:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00z\x88\x02\x03G\x11\x02\x00l\x00\x00\x00\x00t\x00\x02\x00\x00\x00z\x00', 0x20, 0x2, 0x1d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xffffffffffffffff, 0x0, 0x0, 'vlan0\x00', 'vcan0\x00', 'yam0\x00', 'erspan0\x00', @link_local, [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x0, 0x0, 'bond_slave_1\x00', 'ip6gretap0\x00', 'bond_slave_1\x00', 'veth0\x00', @broadcast, [], @link_local, [], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x248) 21:49:29 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) [ 610.216855] kernel msg: ebtables bug: please report to author: Unknown flag for bitmask [ 610.309603] kernel msg: ebtables bug: please report to author: Unknown flag for bitmask 21:49:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) unshare(0x400) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2}) 21:49:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x5437, 0x0) 21:49:29 executing program 3: r0 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, r1+30000000}, 0xfffffffffffffffd) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x40000000016) 21:49:29 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f00000000c0), 0x4) 21:49:29 executing program 0: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0, [0x0, 0x0, 0x50a000]}]}}) 21:49:29 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f00000000c0), 0x4) 21:49:30 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000280)=0x7fff, 0x3, 0x0) msync(&(0x7f00004e4000/0x1000)=nil, 0x1000, 0x0) 21:49:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000000)={'bond0\x00\x00Z\x00', @ifru_ivalue}) 21:49:30 executing program 3: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4) 21:49:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) 21:49:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'bridge0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000005c0)={0x2, 'vlan0\x00'}, 0x18) 21:49:30 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f00000000c0), 0x4) 21:49:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x200000000001, @pix={0x0, 0x0, 0x32315241, 0x0, 0x9}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 611.856232] IPVS: stopping backup sync thread 18389 ... [ 611.888305] IPVS: stopping backup sync thread 18392 ... 21:49:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffff, 0x4) listen(r0, 0x373b) listen(r0, 0x0) 21:49:31 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f00000000c0), 0x4) 21:49:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1000, 0x8042) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x80f, 0x7ffffe, 0x0, &(0x7f0000ffa000/0x3000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 21:49:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000800)=""/150, 0x96}], 0x5}}], 0x1, 0x0, 0x0) 21:49:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000100), 0xa1) 21:49:32 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) 21:49:32 executing program 3: r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000001d008110e00f80ecdb4cb9d907631904080003003b0000001200010024000000", 0x24}], 0x1}, 0x0) 21:49:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000100), 0xa1) 21:49:32 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @dev, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000004a40)="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", 0x5e9}], 0x1}}], 0x1, 0x0) 21:49:32 executing program 2: r0 = socket$inet(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x171, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xffffffff, 0x4) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc={0x27, 0x7}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x2000) 21:49:32 executing program 1: socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000200000002000000e000000100000000000000000800120002000200000000007d2200001800000003030000003fff00000000000000001f03000000160000000301000000000000000000000000000026000000030005000000000002000100000000000000000000000000"], 0x80}}, 0x0) 21:49:32 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) [ 613.426855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:49:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:49:32 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) 21:49:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000100), 0xa1) 21:49:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 21:49:32 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) 21:49:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x25, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 21:49:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, "d53ab01df283e4d56fb56f6de7e5c37ae6bf3465656cb58ce6e1f8c9b407690d338413dad7cff42af4f36ead5fe7e28094c1e091133b38330b7122474e1a3d7d55a71fa8a4ae7b00"}, 0xd8) close(r2) dup3(r0, r3, 0x0) 21:49:33 executing program 5: clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0xa]}, 0x2c) 21:49:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x101, 0x0, @scatter={0x0, 0x0, &(0x7f0000000180)}, &(0x7f00000002c0)="8782298add658b84f562d60bc024250dbd84893374e0bc4d8df1f8882ae161d23ec3e44614751f551e1214b04a44eb08850f0e1d52a571a50cae9fa32898671efc5a904844ff4da514beedfc49c230e50d62e7ff30289c6502f0f02045a9383534bb9c14ec7e523288d5aa375046ec4c2f358d340da95d55703f91a42d833f2cc73815432bf763cc75321663965a4730c29b58e13aeaf71ac0cd78da833d0f896ec197c913797def6393960de41060a2924c43d0930b3b3053228ec1885bbb2a36aa0ae69a152f2ae7d9e026c96b8b77b6850d86b08b1bb003357f6dc2fe8a95e3cad05a3d83afe8a948f7dfedeb262dc33c427d00000000000000000000000000", &(0x7f0000000240)=""/126, 0x80000001, 0x0, 0x0, &(0x7f00000000c0)}) 21:49:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000100), 0xa1) [ 614.162338] net_ratelimit: 26 callbacks suppressed [ 614.162359] protocol 88fb is buggy, dev hsr_slave_0 [ 614.173052] protocol 88fb is buggy, dev hsr_slave_1 [ 614.193418] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. 21:49:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:49:33 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x810) 21:49:33 executing program 4: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)='u', 0x1}], 0x1) 21:49:33 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='\x00\x00P\x00\x00\x00\x00') fchdir(r1) exit(0x0) getcwd(&(0x7f0000000440)=""/223, 0xdf) 21:49:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, "d53ab01df283e4d56fb56f6de7e5c37ae6bf3465656cb58ce6e1f8c9b407690d338413dad7cff42af4f36ead5fe7e28094c1e091133b38330b7122474e1a3d7d55a71fa8a4ae7b00"}, 0xd8) close(r2) dup3(r0, r3, 0x0) 21:49:33 executing program 0: setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2000000}) sigaltstack(&(0x7f0000541000/0x4000)=nil, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 21:49:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 614.722392] protocol 88fb is buggy, dev hsr_slave_0 [ 614.728069] protocol 88fb is buggy, dev hsr_slave_1 21:49:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f00000009c0)={'syz0\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz1\x00', {}, 0x0, [], [], [], [0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 21:49:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = gettid() fcntl$lock(r0, 0x26, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, r1}) [ 614.882383] protocol 88fb is buggy, dev hsr_slave_0 [ 614.888058] protocol 88fb is buggy, dev hsr_slave_1 21:49:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, "d53ab01df283e4d56fb56f6de7e5c37ae6bf3465656cb58ce6e1f8c9b407690d338413dad7cff42af4f36ead5fe7e28094c1e091133b38330b7122474e1a3d7d55a71fa8a4ae7b00"}, 0xd8) close(r2) dup3(r0, r3, 0x0) 21:49:34 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 21:49:34 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000740)=""/24, 0xfffffffffffffed9, &(0x7f0000000780)=""/101, 0x0, 0x2}}, 0x68) 21:49:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 21:49:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 615.362351] protocol 88fb is buggy, dev hsr_slave_0 [ 615.367996] protocol 88fb is buggy, dev hsr_slave_1 [ 615.442683] protocol 88fb is buggy, dev hsr_slave_0 [ 615.448439] protocol 88fb is buggy, dev hsr_slave_1 21:49:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390000000007000100010039", 0x1f) 21:49:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x3080, 0x0) mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x22, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 21:49:34 executing program 4: unshare(0x20040600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x301) 21:49:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, "d53ab01df283e4d56fb56f6de7e5c37ae6bf3465656cb58ce6e1f8c9b407690d338413dad7cff42af4f36ead5fe7e28094c1e091133b38330b7122474e1a3d7d55a71fa8a4ae7b00"}, 0xd8) close(r2) dup3(r0, r3, 0x0) 21:49:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) [ 615.678203] PF_BRIDGE: br_mdb_parse() with invalid ifindex 21:49:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20}, 0x20) [ 615.869980] tmpfs: Bad mount option fd 21:49:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{0x0, 0x10001}, {0x80}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000140)={{0x0, 0x100000001}, {0x80}}) [ 615.938653] tmpfs: Bad mount option fd 21:49:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/149) 21:49:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 21:49:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$packet(r1, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) 21:49:35 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x81, 0x2, 0x0, "2e75f7dfe8db1f13c5cec66a404e6fa1bbea38a38d2040a4dd19afb820278ba5"}) 21:49:35 executing program 2: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)) 21:49:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x100a0}) 21:49:35 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1b, &(0x7f0000000040)="760fc18a", 0x4) 21:49:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 21:49:35 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x200000c, 0x80000044031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) 21:49:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000340)="480000001400190d09004bea3e07bd760284e00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ad67dd13", 0x48}], 0x1) 21:49:35 executing program 4: mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f00000001c0)={0x4, 0x6, 0xc71d, 0x4, 0x0, 0x9, 0x40000003}) 21:49:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1, 0x7}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 21:49:36 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x204002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 21:49:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af03, 0x0) 21:49:36 executing program 4: r0 = socket(0x20000000010, 0x803, 0x0) write(r0, &(0x7f0000000180)="240000001a0007010000b404feff1400020b5aff6410b50000f07f000200ac142c10a22b", 0x24) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0xfffffffffffffd4e, 0x0, 0x0) 21:49:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x100000000032, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev}, 0x4) 21:49:36 executing program 4: r0 = socket(0x20000000010, 0x803, 0x0) write(r0, &(0x7f0000000180)="240000001a0007010000b404feff1400020b5aff6410b50000f07f000200ac142c10a22b", 0x24) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0xfffffffffffffd4e, 0x0, 0x0) 21:49:36 executing program 1: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x1, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@decrefs], 0x0, 0x0, 0x0}) 21:49:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x20080}, 'port0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xda_\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{}, {0x80}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 21:49:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) [ 618.131335] binder: 18633:18638 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 618.266111] binder: 18633:18638 unknown command 0 [ 618.271075] binder: 18633:18638 ioctl c0306201 20a20000 returned -22 21:49:37 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r0, 0x800000c0045009, &(0x7f00000000c0)=0x2) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000080)) 21:49:37 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) rt_sigaction(0x1c, &(0x7f00000000c0)={0x0, {}, 0x0, 0x0}, &(0x7f00000001c0)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 21:49:37 executing program 4: r0 = socket(0x20000000010, 0x803, 0x0) write(r0, &(0x7f0000000180)="240000001a0007010000b404feff1400020b5aff6410b50000f07f000200ac142c10a22b", 0x24) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0xfffffffffffffd4e, 0x0, 0x0) 21:49:37 executing program 2: r0 = memfd_create(&(0x7f0000001380)='}\xbf*x\x89-vO\xd3JUk\x88O\xc4N\xa2\rqI\r\xb3\xd9Q(\n\x1a\x9f/X\x1d9\x03\xc2\x16\xaf\x9d\xffl\xdcC\xeb\xa6\x96\x12$\xd15[z\x85\xf4\x1e\xcc\xfc\xf64\x00\x00\x00\x00\x00\x00\x00Pw\x1bN[\x81\x92\x15P\xc5\x0e\x06\x17\b\xaf\nu\xd8D9z\x9eR\bjh\xce\xa9j\xda\xf8B\x84\x8d\x12.\xeb\x95\x9a\n\xb2M\xc7\xd1\x87N\xc5Os?T\"\xfc\fc\x92\xbb>\xa3l\x9a\xc9\'\x14\xd5+\xb1\xa6\xf5\x9e\xd1\xea%\xd8l\xae\xd6\\dZ\x17/\xe7$(\x8ax\xdc\xc4\xb7\xa4\x9b\x92\xd8\x16Lz\x9e\xfc\xf8\xf1\xdc\xb9+F~%\x16e\x81\x1b\x11vw1:\xdd]\xb9\xe8\x99\xea\xd1O\x83\xf3WA\xad\xaa\xdc\r~[I\x9f\xac\x03\xf9\xe2\x12Je\xe9$\xd2\x00\xef\r\x9dQ2\xa1T4\xb4\x116RO+\x0e\x98\x8b\x1b\xc1\x81\xf0U\x93\xd1\xf7\xbb}N\'\xea\x8f\xbbdd\xda\xb5\x7f\xff\xef\xfd\xd5\x9b\x01?\xad \xa8\xe3l\x86\"\x94M\xd5\xfa]\x9f\x1d\xad\xf9y\xfc\x03=$Z\x00Oa#`qHd\xcc\x8f\x80\xa1\xed\x81 \x85\xe7\x1f\x99\xbe\xe8\xe5\xcey\n\xab\x8b\xa0yM\xba\xcf7}\x8eVQ\xe6d.S\x9e\xb1\x98\xd9\xc8;\xcc\xd5\xf2)\xf7Zh)\xffF\xb8\xc7\xd2%\xe9\xc7\x05\xefq\\\x97]\xd7\x1b\xdf\"o\xca\xd4\xe0\xd5\x125\xefz1\xcc\xe1nZ\xbe\x16\xa1\x8f\xc8)9\xb8\xc6\xc2\xdd8.*U\xe0\xc5\x04\x00\xd9\xfd{ZT\xf2\xe4\xb9\x95x\xa5\xbd\x04\x0f\x8eky\xd8\x8e\xd77\xd7\x0fp\n\x11\x13)\x9b\xf3D\xb2\x88*(\x02{\xb2`:\x01\x00\x00\x00\x00\x00\x00\xee\xff\xff\xffV2\xaa\x82', 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x40d5) 21:49:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) 21:49:37 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r3, 0x0, 0x20000102000007) syz_open_dev$mice(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000500)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r4 = creat(&(0x7f0000000a00)='./bus\x00', 0x0) tee(r2, r3, 0x5, 0x0) io_setup(0xb, &(0x7f0000000240)) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000680)) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="4000007f000000000000000000000000010000000000000005000000000003000000000000000000000000000000000000000000000000000000000000000000e4b88add2a69d29341c59e2402b17b2ee838c5f359158c3b7051b06be6c64688ac2cfc7574f64727c0cc2b457d471eabc7cbe0d47291608d79902ec0290c6af90b052401dff97c5f64a22de8bd33cebfa9a510c59c37929ea83c5554b09d51e51f04d0c6fddb22afbb2be99a885dbbcd53e44a3555b4d28cecbcb707407b06d44126f41330a46989b7afadc7825087c6e8be41ab16b179cfe3075ad6ff0599871fbfd947"], 0xe4) ioctl$BLKROGET(r1, 0x125e, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00'}) 21:49:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) 21:49:37 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) rt_sigaction(0x1c, &(0x7f00000000c0)={0x0, {}, 0x0, 0x0}, &(0x7f00000001c0)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 21:49:37 executing program 4: r0 = socket(0x20000000010, 0x803, 0x0) write(r0, &(0x7f0000000180)="240000001a0007010000b404feff1400020b5aff6410b50000f07f000200ac142c10a22b", 0x24) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0xfffffffffffffd4e, 0x0, 0x0) 21:49:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000200)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000e, 0x32, 0xffffffffffffffff, 0x0) close(r0) 21:49:38 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)="8d", 0x1}], 0x1, 0xb) 21:49:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 21:49:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x3267, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='veth0_to_team\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x5c, 0x4) 21:49:38 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) rt_sigaction(0x1c, &(0x7f00000000c0)={0x0, {}, 0x0, 0x0}, &(0x7f00000001c0)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 21:49:38 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) 21:49:38 executing program 2: unshare(0x20400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) fdatasync(r1) 21:49:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) 21:49:38 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r8}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r9 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r11 = semget$private(0x0, 0x7, 0x400) semtimedop(r11, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r11, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]) accept4$unix(r10, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 21:49:38 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) rt_sigaction(0x1c, &(0x7f00000000c0)={0x0, {}, 0x0, 0x0}, &(0x7f00000001c0)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000200)) [ 619.522674] net_ratelimit: 24 callbacks suppressed [ 619.522708] protocol 88fb is buggy, dev hsr_slave_0 [ 619.533652] protocol 88fb is buggy, dev hsr_slave_1 [ 619.602715] protocol 88fb is buggy, dev hsr_slave_0 [ 619.608559] protocol 88fb is buggy, dev hsr_slave_1 21:49:38 executing program 2: unshare(0x20400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) fdatasync(r1) 21:49:38 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 21:49:38 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)=[{0x16, 0x0, 0x7}], 0x18}, 0x0) [ 619.772166] protocol 88fb is buggy, dev hsr_slave_0 [ 619.777797] protocol 88fb is buggy, dev hsr_slave_1 21:49:39 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) write(r0, &(0x7f0000000100)="27000000f5fe001259f338c57410e8a954978ed50000070000000000", 0x1c) [ 619.952221] IPVS: ftp: loaded support on port[0] = 21 21:49:39 executing program 2: unshare(0x20400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) fdatasync(r1) 21:49:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000000040)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005e1ffef000097"}], 0x20}, 0x0) 21:49:39 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)=[{0x16, 0x0, 0x7}], 0x18}, 0x0) [ 620.162672] protocol 88fb is buggy, dev hsr_slave_0 [ 620.168415] protocol 88fb is buggy, dev hsr_slave_1 21:49:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 21:49:39 executing program 2: unshare(0x20400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) fdatasync(r1) [ 620.402417] protocol 88fb is buggy, dev hsr_slave_0 [ 620.408182] protocol 88fb is buggy, dev hsr_slave_1 21:49:39 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)=[{0x16, 0x0, 0x7}], 0x18}, 0x0) 21:49:40 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000140)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)=[{0x16, 0x0, 0x7}], 0x18}, 0x0) 21:49:40 executing program 3: quotactl(0x80000106, 0x0, 0x0, &(0x7f0000000040)) 21:49:40 executing program 4: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) [ 621.397212] IPVS: ftp: loaded support on port[0] = 21 21:49:40 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local, 0x0, 0x3, [@dev, @remote, @rand_addr]}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 21:49:40 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r8}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r9 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r11 = semget$private(0x0, 0x7, 0x400) semtimedop(r11, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r11, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]) accept4$unix(r10, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 21:49:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 21:49:40 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r8}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r9 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r11 = semget$private(0x0, 0x7, 0x400) semtimedop(r11, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r11, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]) accept4$unix(r10, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 21:49:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_CREATE_VCPU(r0, 0x8004551a, 0x0) 21:49:40 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/32, 0x20}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000002180)=""/223, 0x22c}], 0x1}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000c80)=[{&(0x7f0000000bc0)=""/139, 0x8b}], 0x1, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/51, 0x33}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 622.000659] IPVS: ftp: loaded support on port[0] = 21 21:49:41 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 21:49:41 executing program 2: r0 = socket(0x22, 0x2, 0x4) sendto(r0, &(0x7f0000000000)="114907fc1ed0532c", 0x8, 0x0, 0x0, 0x0) 21:49:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) dup2(r0, r1) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) [ 622.303122] IPVS: ftp: loaded support on port[0] = 21 21:49:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x8, 0x0, 0x0, 0x0, 0xffffffffffffff9c}) 21:49:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) dup2(r0, r1) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 21:49:41 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:49:42 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r8}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r9 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r11 = semget$private(0x0, 0x7, 0x400) semtimedop(r11, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r11, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001340)=ANY=[@ANYBLOB="0800007d281dfd9dee27cd0dff6eeaaf102ca035664cc53435a74adbd22e6413107d17204e62c2911f5ea8efc5699326e02b66b9523b85c5bbc7330062a31704008f5efba52ee00351efb3336b5c0a1b111a2aea05000000437eda4900013e63d23a89cdbc1a7e34d12656699601a7e0368e2b66f2b7db5ca0f7a0a37501000034f4e6880693ee3686d00c0000006250b91a7b312dd0efd662c65b978cfd7d6a1ba7f38400000000000067ae735b1460732bd145277ca7d36dceea02cc882ae34b6f47e36cf5bb7325babc51d92f7906ca7e4f526c0ac1b706a53dcb1b0ff57cbbc2856af788056980a57068fe452d0364c78bd53fa3a7bb3e6135efe8156fed0a239d8abdb49ab2fbfe84b96747f45d3f1d2d6ece819afdf8447c196de6148042363c7536eb58579c0000ae52476364df95bed491a48d66c4ffad0cd44138d4406dc73d4db9384cc0c8df6f0104000000000000000000000000000000aa0c5c098045a987649f2a3a5e413a87c41bf92b9a95c3bf3495fc7e312923dd0dac5672a23c84f92abe67b987b7a52e1d9a742edbb200000000000000000000000000000000f6db93be90ee6ca6520924a137c019064415ccfe6be5fd66e5edd78dbb9c225de2bcbb6f1805b624e1e70f9a6222cdf660a823a6ce24a3f830edf72bb2b0d0e2c56e5c4c7f2fd25473c7a439ac6db8e954d37253697f2f847a24f6979473f9b9b394ac7239b6e821b448f24832384c66b0527f80510f0d89555fc331b09cc6682168e0e82261a24d931aeea0393b52e9cada78acf7857057cb6ad30699f250d3fba6ca9a6304a8dde20869cb2917f5b1df4a1240748a5cf01a08d54fcd97bb5433620562f2c07f73d0373078f9e5be6f5a30a94ee70415fc61558370d2e9b568bd7c7768f14cc9f0b14556984d2e7a2430e72fb456f705144b8fa7aa8e83519e9a524fb5ed52a536568447a55ff3d4ede5b3b7dfae467bf09b83706972ccb1cc097e099a173d0dab0575541db434a63fbb72bf04a2cc8b0b678a22f0f9824af47a3cac8038d97f9b6e573e1d378ea53880df9f29c6747c3bffd7fef7ab64876905633aabf7a4eff46cdaec414c60b538081cff162e8a491ae66448d9928adcbf78663b910051e02c3060a0c011629c562da2983b9d40a82dbb5d28a0a26d5730793ee138ee4501bb1452d6d6dfc1567ddcece239e7c993cc256d10726145a91ef59b8502e56a3c9c5dd192d08a765a28a2773d80b0978f5a1cd1fc5149d41cd419dc25e26be18587863165bff0528ccd0681c841ffe86036c71607345926581cc14c43fcfa3cf5f55724061d6f2c5f509568d6cfca4c55d43a239cec2337bfe732d409df0a8f3e077bc283ee0417a03d4831c2017e727708afde4218ed120064c9945be8679e8b2005967844af22bb05fc1e1f9123fabe541e1f7e5dcd1fe1096f02df43df7c4b9331fb3958aaa3568c55db1f43ae8472707f4c0189e1cbf127e0e2cc7009f490c96c116ddfe95957c52f064dc36b9cedc14a037a4958a525bc254c9507e49bdc9b5d68d4d3a577df4caec4a2ceed73378c7a055906970fc743f21bcdd8385223a6a05fabb60c42a21483f9334fd1827ea68fc76b402bbf8bf66b93632f50657e72905dbc78006820f3d850879083f8db786674a25458a2b79dd3a175e228f0c0b049f8c7a12cb361142969815ed43e101db567fae7366bf3fa43ba839f0b59e2e5979726b33a22b192210ba1ceb9"]) accept4$unix(r10, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 21:49:42 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r8}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r9 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r11 = semget$private(0x0, 0x7, 0x400) semtimedop(r11, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r11, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]) accept4$unix(r10, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 21:49:43 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 21:49:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) dup2(r0, r1) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 21:49:43 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x6a, 0x0, 0x34424752}}) 21:49:43 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 21:49:43 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r8}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r9 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r11 = semget$private(0x0, 0x7, 0x400) semtimedop(r11, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r11, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]) accept4$unix(r10, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) 21:49:43 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x7c000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r3 = shmget(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000300)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'bridge_slave_0\x00'}) getsockname(r5, &(0x7f00000004c0)=@ipx, &(0x7f0000000380)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000980)={'vcan0\x00', r7}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000002000)={@local, 0x7e, r8}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r9 = dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f00000003c0)) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r11 = semget$private(0x0, 0x7, 0x400) semtimedop(r11, &(0x7f0000000140)=[{0x0, 0xfffffffffffffff9}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r11, &(0x7f0000000040)=[{0x0, 0x7fffffff}, {}], 0x2) semctl$SETALL(r11, 0x0, 0x11, &(0x7f0000000080)=[0x1]) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000001340)=ANY=[@ANYBLOB="0800007d281dfd9dee27cd0dff6eeaaf102ca035664cc53435a74adbd22e6413107d17204e62c2911f5ea8efc5699326e02b66b9523b85c5bbc7330062a31704008f5efba52ee00351efb3336b5c0a1b111a2aea05000000437eda4900013e63d23a89cdbc1a7e34d12656699601a7e0368e2b66f2b7db5ca0f7a0a37501000034f4e6880693ee3686d00c0000006250b91a7b312dd0efd662c65b978cfd7d6a1ba7f38400000000000067ae735b1460732bd145277ca7d36dceea02cc882ae34b6f47e36cf5bb7325babc51d92f7906ca7e4f526c0ac1b706a53dcb1b0ff57cbbc2856af788056980a57068fe452d0364c78bd53fa3a7bb3e6135efe8156fed0a239d8abdb49ab2fbfe84b96747f45d3f1d2d6ece819afdf8447c196de6148042363c7536eb58579c0000ae52476364df95bed491a48d66c4ffad0cd44138d4406dc73d4db9384cc0c8df6f0104000000000000000000000000000000aa0c5c098045a987649f2a3a5e413a87c41bf92b9a95c3bf3495fc7e312923dd0dac5672a23c84f92abe67b987b7a52e1d9a742edbb200000000000000000000000000000000f6db93be90ee6ca6520924a137c019064415ccfe6be5fd66e5edd78dbb9c225de2bcbb6f1805b624e1e70f9a6222cdf660a823a6ce24a3f830edf72bb2b0d0e2c56e5c4c7f2fd25473c7a439ac6db8e954d37253697f2f847a24f6979473f9b9b394ac7239b6e821b448f24832384c66b0527f80510f0d89555fc331b09cc6682168e0e82261a24d931aeea0393b52e9cada78acf7857057cb6ad30699f250d3fba6ca9a6304a8dde20869cb2917f5b1df4a1240748a5cf01a08d54fcd97bb5433620562f2c07f73d0373078f9e5be6f5a30a94ee70415fc61558370d2e9b568bd7c7768f14cc9f0b14556984d2e7a2430e72fb456f705144b8fa7aa8e83519e9a524fb5ed52a536568447a55ff3d4ede5b3b7dfae467bf09b83706972ccb1cc097e099a173d0dab0575541db434a63fbb72bf04a2cc8b0b678a22f0f9824af47a3cac8038d97f9b6e573e1d378ea53880df9f29c6747c3bffd7fef7ab64876905633aabf7a4eff46cdaec414c60b538081cff162e8a491ae66448d9928adcbf78663b910051e02c3060a0c011629c562da2983b9d40a82dbb5d28a0a26d5730793ee138ee4501bb1452d6d6dfc1567ddcece239e7c993cc256d10726145a91ef59b8502e56a3c9c5dd192d08a765a28a2773d80b0978f5a1cd1fc5149d41cd419dc25e26be18587863165bff0528ccd0681c841ffe86036c71607345926581cc14c43fcfa3cf5f55724061d6f2c5f509568d6cfca4c55d43a239cec2337bfe732d409df0a8f3e077bc283ee0417a03d4831c2017e727708afde4218ed120064c9945be8679e8b2005967844af22bb05fc1e1f9123fabe541e1f7e5dcd1fe1096f02df43df7c4b9331fb3958aaa3568c55db1f43ae8472707f4c0189e1cbf127e0e2cc7009f490c96c116ddfe95957c52f064dc36b9cedc14a037a4958a525bc254c9507e49bdc9b5d68d4d3a577df4caec4a2ceed73378c7a055906970fc743f21bcdd8385223a6a05fabb60c42a21483f9334fd1827ea68fc76b402bbf8bf66b93632f50657e72905dbc78006820f3d850879083f8db786674a25458a2b79dd3a175e228f0c0b049f8c7a12cb361142969815ed43e101db567fae7366bf3fa43ba839f0b59e2e5979726b33a22b192210ba1ceb9"]) accept4$unix(r10, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) [ 624.228381] IPVS: ftp: loaded support on port[0] = 21 [ 624.416139] IPVS: ftp: loaded support on port[0] = 21 21:49:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) dup2(r0, r1) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) 21:49:43 executing program 2: r0 = socket(0x20000000000000a, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x48c1) [ 624.562766] net_ratelimit: 26 callbacks suppressed [ 624.562786] protocol 88fb is buggy, dev hsr_slave_0 [ 624.573843] protocol 88fb is buggy, dev hsr_slave_1 21:49:44 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x0, 0x0, 0x0}) [ 625.122242] protocol 88fb is buggy, dev hsr_slave_0 [ 625.127698] protocol 88fb is buggy, dev hsr_slave_1 [ 625.152703] binder_alloc: binder_alloc_mmap_handler: 18853 20001000-20004000 already mapped failed -16 [ 625.173845] binder: BINDER_SET_CONTEXT_MGR already set [ 625.179286] binder: 18853:18854 ioctl 40046207 0 returned -16 [ 625.206886] binder_alloc: 18853: binder_alloc_buf, no vma [ 625.215452] binder: 18853:18855 transaction failed 29189/-3, size 24-8 line 3035 21:49:44 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) [ 625.255839] binder: release 18853:18854 transaction 13 out, still active [ 625.267922] binder: send failed reply for transaction 13, target dead [ 625.282574] protocol 88fb is buggy, dev hsr_slave_0 [ 625.288391] protocol 88fb is buggy, dev hsr_slave_1 21:49:44 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @dev, @random="8c7e0a6e8c74", @broadcast}}}}, 0x0) [ 625.415258] IPVS: ftp: loaded support on port[0] = 21 21:49:44 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 625.762623] protocol 88fb is buggy, dev hsr_slave_0 [ 625.768424] protocol 88fb is buggy, dev hsr_slave_1 [ 625.842563] protocol 88fb is buggy, dev hsr_slave_0 [ 625.848359] protocol 88fb is buggy, dev hsr_slave_1 21:49:45 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) 21:49:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, 0x0}], 0x0}}], 0x0, 0x10000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 21:49:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x24020400) io_setup(0x2, &(0x7f0000000380)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 21:49:45 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@hci={0x1f, r1}, 0x2b) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x4, 0xffffff7f, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x1f4, 0x0, 0x0, 0x0, "0c0009430d62f892ee85acbb909edfc4d793f1ee87fbf2378794714b5e059251b0070c115084d98adf9573e01fff7fa16064a483083129f0ce7270879326925f"}}, 0x80}}, 0x0) 21:49:45 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x37) fcntl$setown(r1, 0x8, r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xfffffffffffffffd}, 0x1fa) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x13, &(0x7f0000000040), 0x3d2) close(r3) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) [ 626.543420] binder: 18875:18881 got new transaction with bad transaction stack, transaction 18 has target 18875:0 [ 626.554249] binder: 18875:18881 transaction failed 29201/-71, size 0-0 line 2946 [ 626.614154] binder_alloc: binder_alloc_mmap_handler: 18875 20001000-20003000 already mapped failed -16 [ 626.638319] binder: BINDER_SET_CONTEXT_MGR already set [ 626.645464] binder: 18875:18881 ioctl 40046207 0 returned -16 [ 626.661876] binder_alloc: 18875: binder_alloc_buf, no vma [ 626.667600] binder: 18875:18888 transaction failed 29189/-3, size 40-0 line 3035 21:49:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x0) [ 626.738811] binder_alloc: 18875: binder_alloc_buf, no vma [ 626.742414] binder: release 18875:18881 transaction 18 out, still active [ 626.744668] binder: 18875:18891 transaction failed 29189/-3, size 0-0 line 3035 [ 626.751406] binder: undelivered TRANSACTION_COMPLETE [ 626.764338] binder: undelivered TRANSACTION_ERROR: 29201 [ 626.854751] binder: undelivered TRANSACTION_ERROR: 29189 [ 626.860338] binder: undelivered TRANSACTION_ERROR: 29189 [ 626.866005] binder: send failed reply for transaction 18, target dead 21:49:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x2, 0x0, 0x0) 21:49:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 21:49:46 executing program 4: mkdir(&(0x7f0000000dc0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) r0 = inotify_init() unshare(0x24020400) inotify_add_watch(r0, &(0x7f0000b99e7d)='./file0\x00', 0x8) 21:49:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x3, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 21:49:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2288, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:49:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 21:49:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1c, 0x401, 0x0, 0x0, {0x2000040007}}, 0x4dc}}, 0x0) 21:49:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000683ff0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 21:49:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 21:49:48 executing program 5: syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff89, 0x8, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply={0xe, 0xe803}}}}}, &(0x7f0000000100)) 21:49:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f00000004c0)=0x1c7) 21:49:48 executing program 0: unshare(0x400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 21:49:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r0) 21:49:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 21:49:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000683ff0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 21:49:48 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 21:49:48 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_dump={0x40}}) 21:49:48 executing program 0: unshare(0x400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 21:49:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket(0x40000000015, 0x805, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 21:49:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000000)) 21:49:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f00000004c0)=0x1c7) [ 629.892444] net_ratelimit: 25 callbacks suppressed [ 629.892475] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 629.922495] protocol 88fb is buggy, dev hsr_slave_0 [ 629.928276] protocol 88fb is buggy, dev hsr_slave_1 [ 630.002540] protocol 88fb is buggy, dev hsr_slave_0 [ 630.008399] protocol 88fb is buggy, dev hsr_slave_1 21:49:49 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000080)=0x80) sendmsg$can_bcm(r0, &(0x7f0000001a40)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000001a00)={&(0x7f0000001980)={0x0, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5f128cec58becbb3"}}, 0x48}}, 0x0) [ 630.162628] protocol 88fb is buggy, dev hsr_slave_0 [ 630.168595] protocol 88fb is buggy, dev hsr_slave_1 21:49:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61c3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:49:49 executing program 0: unshare(0x400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x1, &(0x7f0000000040), &(0x7f0000000000)=0x4) 21:49:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000683ff0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 21:49:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x12, &(0x7f0000651000)=""/240, &(0x7f00000004c0)=0x1c7) 21:49:49 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000001c0)='0,', 0x2, 0x0) [ 630.494852] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 630.562666] protocol 88fb is buggy, dev hsr_slave_0 [ 630.568534] protocol 88fb is buggy, dev hsr_slave_1 [ 630.737549] ================================================================== [ 630.744982] BUG: KMSAN: uninit-value in mpol_rebind_task+0x1b2/0x250 [ 630.751615] CPU: 1 PID: 18997 Comm: syz-executor.5 Not tainted 5.0.0-rc1+ #9 [ 630.758824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.768183] Call Trace: [ 630.770819] dump_stack+0x173/0x1d0 [ 630.774491] kmsan_report+0x12e/0x2a0 [ 630.778325] __msan_warning+0x82/0xf0 [ 630.782150] mpol_rebind_task+0x1b2/0x250 [ 630.786327] update_tasks_nodemask+0x484/0xca0 [ 630.790963] cpuset_write_resmask+0x1453/0x2880 [ 630.795691] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 630.800903] ? cpuset_common_seq_show+0x3f0/0x3f0 [ 630.805763] cgroup_file_write+0x44a/0x8e0 [ 630.810043] ? cgroup_seqfile_stop+0x150/0x150 [ 630.814720] kernfs_fop_write+0x569/0x840 [ 630.818903] ? kernfs_fop_read+0x9a0/0x9a0 [ 630.823155] __vfs_write+0x1e2/0xc20 [ 630.826935] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 630.832328] ? __sb_start_write+0x10c/0x230 [ 630.836671] vfs_write+0x481/0x920 [ 630.840250] __se_sys_pwrite64+0x285/0x330 [ 630.845039] __x64_sys_pwrite64+0x56/0x70 [ 630.849210] do_syscall_64+0xbc/0xf0 [ 630.852986] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 630.858203] RIP: 0033:0x457e29 [ 630.861414] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 630.880322] RSP: 002b:00007fb6d34f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 630.888049] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 630.895323] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000004 [ 630.902600] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 630.909873] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d34f46d4 [ 630.917149] R13: 00000000004c4a34 R14: 00000000004d8408 R15: 00000000ffffffff [ 630.924457] [ 630.926104] Uninit was stored to memory at: [ 630.930432] kmsan_internal_chain_origin+0x134/0x230 [ 630.935560] kmsan_memcpy_memmove_metadata+0xcf2/0xf10 [ 630.940846] kmsan_memcpy_metadata+0xb/0x10 [ 630.945176] __msan_memcpy+0x58/0x70 [ 630.948904] __mpol_dup+0x178/0x470 [ 630.952540] copy_process+0x2083/0xafe0 [ 630.956521] _do_fork+0x384/0x1050 [ 630.960066] __se_sys_clone+0xf6/0x110 [ 630.963964] __x64_sys_clone+0x62/0x80 [ 630.967890] do_syscall_64+0xbc/0xf0 [ 630.971618] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 630.976815] [ 630.978443] Uninit was created at: [ 630.982023] kmsan_internal_poison_shadow+0x92/0x150 [ 630.987132] kmsan_kmalloc+0xa6/0x130 [ 630.990942] kmem_cache_alloc+0x585/0xb60 [ 630.995119] do_set_mempolicy+0x353/0xad0 [ 630.999273] __se_sys_set_mempolicy+0x216/0x2a0 [ 631.003960] __x64_sys_set_mempolicy+0x4a/0x70 [ 631.008557] do_syscall_64+0xbc/0xf0 [ 631.012284] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 631.017476] ================================================================== [ 631.024856] Disabling lock debugging due to kernel taint [ 631.030312] Kernel panic - not syncing: panic_on_warn set ... [ 631.036220] CPU: 1 PID: 18997 Comm: syz-executor.5 Tainted: G B 5.0.0-rc1+ #9 [ 631.044801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.054155] Call Trace: [ 631.056762] dump_stack+0x173/0x1d0 [ 631.060429] panic+0x3d1/0xb01 [ 631.063697] kmsan_report+0x293/0x2a0 [ 631.067520] __msan_warning+0x82/0xf0 [ 631.071339] mpol_rebind_task+0x1b2/0x250 [ 631.075521] update_tasks_nodemask+0x484/0xca0 [ 631.080183] cpuset_write_resmask+0x1453/0x2880 [ 631.084898] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 631.090113] ? cpuset_common_seq_show+0x3f0/0x3f0 [ 631.094974] cgroup_file_write+0x44a/0x8e0 [ 631.099252] ? cgroup_seqfile_stop+0x150/0x150 [ 631.103844] kernfs_fop_write+0x569/0x840 [ 631.108036] ? kernfs_fop_read+0x9a0/0x9a0 [ 631.112282] __vfs_write+0x1e2/0xc20 [ 631.116036] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 631.121423] ? __sb_start_write+0x10c/0x230 [ 631.125773] vfs_write+0x481/0x920 [ 631.129369] __se_sys_pwrite64+0x285/0x330 [ 631.133635] __x64_sys_pwrite64+0x56/0x70 [ 631.137816] do_syscall_64+0xbc/0xf0 [ 631.141548] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 631.146745] RIP: 0033:0x457e29 [ 631.149957] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 631.168868] RSP: 002b:00007fb6d34f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 631.176585] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 631.183860] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000004 [ 631.191157] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 631.198445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6d34f46d4 [ 631.205737] R13: 00000000004c4a34 R14: 00000000004d8408 R15: 00000000ffffffff [ 631.214078] Kernel Offset: disabled [ 631.217712] Rebooting in 86400 seconds..