f, 0xfffe, 0xffffffffffffffff) geteuid() setuid(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:34:00 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(0x0, &(0x7f0000000600), 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:34:00 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getpgid(0xffffffffffffffff) getpid() getpid() getpgrp(0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() setuid(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:34:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getpgid(0xffffffffffffffff) getpid() getpid() getpgrp(0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() setuid(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:34:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getpgid(0xffffffffffffffff) getpid() getpid() getpgrp(0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() setuid(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:34:01 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getpgid(0xffffffffffffffff) getpid() getpid() getpgrp(0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() setuid(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:34:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getpgid(0xffffffffffffffff) getpid() getpid() getpgrp(0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() setuid(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:34:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getpgid(0xffffffffffffffff) getpid() getpid() getpgrp(0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getpgrp(0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) geteuid() setuid(0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r1, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 03:34:02 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:02 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(0x0, &(0x7f0000000600), 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:34:02 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(0x0, &(0x7f0000000600), 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:34:02 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) [ 659.096040][ C0] net_ratelimit: 12 callbacks suppressed [ 659.096100][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.108085][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:02 executing program 5: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) [ 659.332593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.338414][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:02 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) [ 659.413451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.419661][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:03 executing program 3: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xffffffff00000001}) 03:34:03 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(0x0, &(0x7f0000000600), 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:34:03 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) [ 659.743024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 659.749644][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:03 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(0x0, &(0x7f0000000600), 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:34:03 executing program 5: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:03 executing program 3: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:03 executing program 5: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) [ 660.292562][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 660.298454][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:03 executing program 0: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xffffffff00000001}) 03:34:03 executing program 4: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(0x0, &(0x7f0000000600), 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:34:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xffffffff00000001}) 03:34:04 executing program 3: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x110) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {}, [], {}, {0x20, 0x2}}, 0x34, 0x3) r2 = msgget(0xffffffffffffffff, 0x100) msgctl$IPC_RMID(r2, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000440)={0x42a, 0x0, [], {0x0, @bt={0x3, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0xf8, 0x3f, 0x9, 0x7, 0x6af0, 0x10000, 0xf5, 0x1, 0x4}}}) write$P9_RMKDIR(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d3078303030303030303030303030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac965f686", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) 03:34:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xffffffff00000001}) 03:34:04 executing program 2: syz_open_dev$evdev(&(0x7f0000072fee)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6(0xa, 0xfffffffffff6, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4004700e, 0xffffffff00000000) r1 = syz_open_dev$sndpcmp(0x0, 0x3ff, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000680)="dffa85bb8d2c2e609c9175923d2191527d0d00e82aec3ca9e407d388096797728ff9b5bc0d00d5e32976dc07318515fd9d4c32869d7265b3c9913360d7a8a63a946dbc6c8642cd0eae59969aac82badb3f7557de2ea2fea2933716656da98579cdfdf52976b61682eff525a2b7d7edb6e879b7be63535a82ebb3fc2677f8f05cf17493373704806226f287a8e4d184648b9b69", 0x93, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\'', 0x1ff) getuid() r3 = getegid() ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000440)=0x3) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) syz_open_dev$sndtimer(0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r3]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)) getgroups(0x3, &(0x7f0000000340)=[0xee00, 0xee01, 0xee00]) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/162) lstat(0x0, &(0x7f0000000880)) sendmsg$netlink(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) getresuid(0x0, &(0x7f0000000600), 0x0) prctl$PR_CAPBSET_READ(0x17, 0x24) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x0, {{0x2, 0x4e24, @rand_addr=0xff0000000}}}, 0x88) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:34:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xffffffff00000001}) 03:34:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 03:34:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") fallocate(r0, 0x11, 0x0, 0x100000001) 03:34:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xffffffff00000001}) 03:34:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") fallocate(r0, 0x11, 0x0, 0x100000001) 03:34:05 executing program 4: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xffffffff00000001}) 03:34:05 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001640)) [ 661.874293][T23936] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") fallocate(r0, 0x11, 0x0, 0x100000001) 03:34:05 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001640)) 03:34:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af12, &(0x7f0000000280)={0x0, 0x2000000}) 03:34:05 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @random="6f7e6256f32e", [], {@ipv6={0x86dd, {0x0, 0x6, "6d570e", 0x14, 0xff, 0x0, @empty, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x105082) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") fallocate(r0, 0x11, 0x0, 0x100000001) 03:34:05 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001640)) 03:34:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:05 executing program 4: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:05 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001640)) 03:34:06 executing program 3: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af12, &(0x7f0000000280)={0x0, 0x2000000}) [ 662.697480][T24325] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:06 executing program 0: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) [ 662.770902][T24367] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:06 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @random="6f7e6256f32e", [], {@ipv6={0x86dd, {0x0, 0x6, "6d570e", 0x14, 0xff, 0x0, @empty, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 662.928693][T24464] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af12, &(0x7f0000000280)={0x0, 0x2000000}) 03:34:06 executing program 3: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:06 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @random="6f7e6256f32e", [], {@ipv6={0x86dd, {0x0, 0x6, "6d570e", 0x14, 0xff, 0x0, @empty, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:34:06 executing program 4: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:06 executing program 0: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af12, &(0x7f0000000280)={0x0, 0x2000000}) [ 663.203669][T24596] tls_set_device_offload_rx: netdev lo with no TLS offload [ 663.281533][T24604] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:06 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @random="6f7e6256f32e", [], {@ipv6={0x86dd, {0x0, 0x6, "6d570e", 0x14, 0xff, 0x0, @empty, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 663.329602][T24609] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:07 executing program 4: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:07 executing program 0: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:07 executing program 3: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) [ 663.810441][T24724] tls_set_device_offload_rx: netdev lo with no TLS offload [ 663.872235][T24731] tls_set_device_offload_rx: netdev lo with no TLS offload [ 663.884084][T24732] tls_set_device_offload_rx: netdev lo with no TLS offload 03:34:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:07 executing program 0: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) [ 664.452534][ C1] net_ratelimit: 18 callbacks suppressed [ 664.452542][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.464072][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:08 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:08 executing program 3: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 03:34:08 executing program 5: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x5000000) 03:34:08 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:08 executing program 0: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:08 executing program 5: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x5000000) [ 665.333240][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 665.339680][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:08 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:08 executing program 3: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:09 executing program 5: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x5000000) 03:34:09 executing program 0: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0x0, {}, {0x0, 0x0, 0x0, 0x3}, {0x245, 0x9}}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) [ 665.573383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 665.579680][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 665.587072][T25078] overlayfs: upper fs does not support tmpfile. [ 665.637786][T25078] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 665.653210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 665.659849][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:09 executing program 5: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x5000000) 03:34:09 executing program 3: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) 03:34:09 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x7, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, 0x0) close(r2) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000240)={0x1, 0x0, 0x0, {0x0, 0xfffffffffffffffa, 0x3f77577f, 0x7}}) recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) [ 665.972534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 665.978405][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:09 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:09 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 666.245959][T25203] overlayfs: upper fs does not support tmpfile. [ 666.252286][T25203] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 03:34:09 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 666.299455][T25205] overlayfs: upper fs does not support tmpfile. [ 666.328514][T25205] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 03:34:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x9000000) 03:34:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x277]}) 03:34:09 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:09 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:10 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 666.648082][T25216] overlayfs: upper fs does not support tmpfile. [ 666.650952][T25220] overlayfs: upper fs does not support tmpfile. [ 666.692236][T25216] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 666.697803][T25226] overlayfs: upper fs does not support tmpfile. [ 666.716268][T25220] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 666.727521][T25226] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 03:34:10 executing program 1: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:10 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x277]}) 03:34:10 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3}) 03:34:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x9000000) [ 667.026643][T25422] overlayfs: upper fs does not support tmpfile. [ 667.077557][T25436] overlayfs: upper fs does not support tmpfile. [ 667.083936][T25422] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 667.102372][T25436] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 667.131959][T25440] overlayfs: upper fs does not support tmpfile. [ 667.153004][T25440] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. 03:34:10 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 03:34:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x277]}) 03:34:10 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x420c, r1, 0x0, 0x0) 03:34:10 executing program 1: socketpair(0x22, 0x2, 0x26, &(0x7f00000000c0)) 03:34:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3}) [ 667.331875][T25450] overlayfs: upper fs does not support tmpfile. [ 667.373430][T25450] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 667.439646][T25458] delete_channel: no stack 03:34:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x9000000) [ 667.470431][T25458] delete_channel: no stack 03:34:10 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3}) [ 667.504583][T25458] delete_channel: no stack [ 667.509349][T25458] delete_channel: no stack 03:34:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") keyctl$dh_compute(0x7, &(0x7f0000000140), 0x0, 0x0, 0x0) 03:34:10 executing program 1: socketpair(0x22, 0x2, 0x26, &(0x7f00000000c0)) 03:34:11 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x420c, r1, 0x0, 0x0) 03:34:11 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3}) 03:34:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x9000000) [ 667.803743][T25678] delete_channel: no stack [ 667.819717][T25678] delete_channel: no stack 03:34:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x277]}) 03:34:11 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000200, 0x0, 0x0, 0x20000230, 0x20000568], 0x0, 0x0, 0x0}, 0x1b0) 03:34:11 executing program 1: socketpair(0x22, 0x2, 0x26, &(0x7f00000000c0)) 03:34:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") keyctl$dh_compute(0x7, &(0x7f0000000140), 0x0, 0x0, 0x0) 03:34:11 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x420c, r1, 0x0, 0x0) [ 668.041661][T25788] kernel msg: ebtables bug: please report to author: Wrong len argument 03:34:11 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000200, 0x0, 0x0, 0x20000230, 0x20000568], 0x0, 0x0, 0x0}, 0x1b0) [ 668.145786][T25802] delete_channel: no stack [ 668.192725][T25802] delete_channel: no stack 03:34:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") keyctl$dh_compute(0x7, &(0x7f0000000140), 0x0, 0x0, 0x0) [ 668.270353][T25882] kernel msg: ebtables bug: please report to author: Wrong len argument 03:34:11 executing program 1: socketpair(0x22, 0x2, 0x26, &(0x7f00000000c0)) 03:34:11 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x420c, r1, 0x0, 0x0) 03:34:11 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fstat(r0, &(0x7f0000000a00)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="73797a31da3b7a1e0379d76154a9f8a7b36a3abdabbce49bbe65e16cc67b6478"], 0x20) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 03:34:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xffffffffeffffffe, &(0x7f0000000040)) 03:34:11 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000200, 0x0, 0x0, 0x20000230, 0x20000568], 0x0, 0x0, 0x0}, 0x1b0) 03:34:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") keyctl$dh_compute(0x7, &(0x7f0000000140), 0x0, 0x0, 0x0) [ 668.447126][T25911] delete_channel: no stack [ 668.461526][T25911] delete_channel: no stack 03:34:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300004085687f0000000400ff7e28000000120a43ba5d806055b6fdd80b40000000090003000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 03:34:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x100000000000000, [0x40000020], [0xc2]}) 03:34:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xffffffffeffffffe, &(0x7f0000000040)) [ 668.653689][T25989] kernel msg: ebtables bug: please report to author: Wrong len argument 03:34:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fstat(r0, &(0x7f0000000a00)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="73797a31da3b7a1e0379d76154a9f8a7b36a3abdabbce49bbe65e16cc67b6478"], 0x20) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 03:34:12 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000200, 0x0, 0x0, 0x20000230, 0x20000568], 0x0, 0x0, 0x0}, 0x1b0) 03:34:12 executing program 4: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0x20010000}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 668.774874][T26035] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 668.795969][T26035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:34:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xffffffffeffffffe, &(0x7f0000000040)) 03:34:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300004085687f0000000400ff7e28000000120a43ba5d806055b6fdd80b40000000090003000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 668.902672][T26076] kernel msg: ebtables bug: please report to author: Wrong len argument 03:34:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fstat(r0, &(0x7f0000000a00)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="73797a31da3b7a1e0379d76154a9f8a7b36a3abdabbce49bbe65e16cc67b6478"], 0x20) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 03:34:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) 03:34:12 executing program 4: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0x20010000}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 03:34:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xffffffffeffffffe, &(0x7f0000000040)) [ 669.024021][T26159] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 669.055661][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:34:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x100000000000000, [0x40000020], [0xc2]}) 03:34:12 executing program 4: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0x20010000}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 03:34:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300004085687f0000000400ff7e28000000120a43ba5d806055b6fdd80b40000000090003000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 03:34:12 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fstat(r0, &(0x7f0000000a00)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="73797a31da3b7a1e0379d76154a9f8a7b36a3abdabbce49bbe65e16cc67b6478"], 0x20) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 03:34:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xfff6) [ 669.390896][T26182] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 03:34:12 executing program 4: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0x20010000}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'.\x00'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 669.444427][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:34:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x100000000000000, [0x40000020], [0xc2]}) [ 669.492516][ C0] net_ratelimit: 12 callbacks suppressed [ 669.492525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.504025][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300004085687f0000000400ff7e28000000120a43ba5d806055b6fdd80b40000000090003000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 03:34:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000000), 0x4) [ 669.725917][T26242] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 669.734161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.734219][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.785700][T26242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 669.812472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.818334][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) 03:34:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000000), 0x4) 03:34:13 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)='+\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x800) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x9}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x22200, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) clone(0x802000, 0x0, 0x0, 0x0, 0x0) exit(0x0) 03:34:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) 03:34:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x100000000000000, [0x40000020], [0xc2]}) 03:34:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xfff6) 03:34:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000000), 0x4) [ 670.132883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 670.138728][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xfff6) 03:34:13 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x19, &(0x7f0000000000), 0x4) 03:34:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000000140)) 03:34:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xfff6) [ 670.692534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 670.698346][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) 03:34:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000000140)) 03:34:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xfff6) 03:34:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) 03:34:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xfff6) 03:34:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000000140)) 03:34:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000000140)) 03:34:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x100000001, 0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x4000000000004e22, 0x0, @loopback}, 0x1c) 03:34:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0xfff6) 03:34:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x100000001, 0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x4000000000004e22, 0x0, @loopback}, 0x1c) 03:34:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) 03:34:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x100000001, 0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x4000000000004e22, 0x0, @loopback}, 0x1c) 03:34:15 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0xe2e4, 0x20000fff}) 03:34:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x100000001, 0x4) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x4000000000004e22, 0x0, @loopback}, 0x1c) 03:34:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) 03:34:16 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='\x7f') 03:34:17 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) 03:34:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) [ 673.717533][T27694] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 673.732120][T27694] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 673.755773][T27694] Error parsing options; rc = [-22] 03:34:17 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='\x7f') 03:34:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:17 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='\x7f') [ 673.994810][T27890] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 674.002182][T27890] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 674.062665][T27890] Error parsing options; rc = [-22] 03:34:17 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='\x7f') [ 674.204195][T27973] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 674.237025][T27973] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README 03:34:17 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 674.252245][T27973] Error parsing options; rc = [-22] 03:34:17 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='\x7f') [ 674.371316][T28115] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 674.400181][T28115] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README 03:34:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom, 0x1}, [@null, @netrom, @bcast, @remote, @bcast, @rose, @remote, @default]}, 0x48) fstat(0xffffffffffffffff, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x40000, 0x0) execveat(r2, &(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000900)=[&(0x7f00000006c0)='map=normal', &(0x7f0000000700)='/dev/btrfs-control\x00', &(0x7f0000000740)='/dev/btrfs-control\x00', &(0x7f0000000780)='/dev/btrfs-control\x00', &(0x7f00000007c0)='iso9660\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='&vmnet1trusted&[+&keyring&\x00', &(0x7f0000000880)='iso9660\x00', &(0x7f00000008c0)='rootcontext'], &(0x7f0000000a40)=[&(0x7f00000009c0)='*bdev\x00', &(0x7f0000000a00)='staff_u'], 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/btrfs-control\x00', 0x400080, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x101080) r5 = syz_open_dev$vcsa(0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x88010, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0x60, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0xa0d42c3822186b1c, 0x0, 0x0, 0x58, 0x0, &(0x7f00000004c0)=[@flat={0x77682a85, 0x0, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x31}], 0x0}}}, @acquire_done={0x40106309, r7, 0x3}], 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, 0x0, 0xfffffcad, 0x0, 0x0, 0x0) [ 674.449929][T28115] Error parsing options; rc = [-22] 03:34:17 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) 03:34:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:17 executing program 1: socket$kcm(0x10, 0x0, 0x4) socket(0x800000002b, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x80000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x4, 0xa492, 0x90, &(0x7f0000000200)="5f76598adaabb108412552987af3c1f2fa53ab87175c7f705fd2e714fa436bab3467506275e52ab9fa3a61b8ff2d85e1d144d9fc2d4434cc2591bbfd2083ca235d5f3e6bf5cee42bca910b675b93f5d2391d3d3802004e1dd3ef915e4bf0be6938d0b142a8253c17f1c9e7d957f93f1ba4e9b2950876f6e380c538879b0eb594a117f13cef8623d8d3f012e9eb5a64b6"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x9, 0x1a6) prctl$PR_CAPBSET_DROP(0x18, 0x20) 03:34:17 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='\x7f') [ 674.625491][T28169] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 674.696321][T28169] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 674.707685][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 674.707699][ T26] audit: type=1804 audit(2000000058.079:150): pid=28181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir124178571/syzkaller.qnWAEQ/875/bus" dev="sda1" ino=16708 res=1 03:34:18 executing program 3: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)) [ 674.786224][T28169] Error parsing options; rc = [-22] [ 674.852547][ C1] net_ratelimit: 22 callbacks suppressed [ 674.852555][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 674.864119][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:18 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='\x7f') 03:34:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10fbb020) 03:34:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 03:34:18 executing program 1: socket$kcm(0x10, 0x0, 0x4) socket(0x800000002b, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x80000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x4, 0xa492, 0x90, &(0x7f0000000200)="5f76598adaabb108412552987af3c1f2fa53ab87175c7f705fd2e714fa436bab3467506275e52ab9fa3a61b8ff2d85e1d144d9fc2d4434cc2591bbfd2083ca235d5f3e6bf5cee42bca910b675b93f5d2391d3d3802004e1dd3ef915e4bf0be6938d0b142a8253c17f1c9e7d957f93f1ba4e9b2950876f6e380c538879b0eb594a117f13cef8623d8d3f012e9eb5a64b6"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x9, 0x1a6) prctl$PR_CAPBSET_DROP(0x18, 0x20) 03:34:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 675.228972][T28538] ecryptfs_parse_options: eCryptfs: unrecognized option [] [ 675.240233][T28538] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README 03:34:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 675.345291][T28538] Error parsing options; rc = [-22] [ 675.464442][ T26] audit: type=1804 audit(2000000058.849:151): pid=28606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir124178571/syzkaller.qnWAEQ/876/bus" dev="sda1" ino=16665 res=1 03:34:19 executing program 5: socket$kcm(0x10, 0x0, 0x4) socket(0x800000002b, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x80000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x4, 0xa492, 0x90, &(0x7f0000000200)="5f76598adaabb108412552987af3c1f2fa53ab87175c7f705fd2e714fa436bab3467506275e52ab9fa3a61b8ff2d85e1d144d9fc2d4434cc2591bbfd2083ca235d5f3e6bf5cee42bca910b675b93f5d2391d3d3802004e1dd3ef915e4bf0be6938d0b142a8253c17f1c9e7d957f93f1ba4e9b2950876f6e380c538879b0eb594a117f13cef8623d8d3f012e9eb5a64b6"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x9, 0x1a6) prctl$PR_CAPBSET_DROP(0x18, 0x20) 03:34:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) 03:34:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001d008103e00f80ecdb4cb90405c8650407007400000000fb120003003200000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:34:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 675.734332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 675.740176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 675.833623][ T26] audit: type=1804 audit(2000000059.219:152): pid=28713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir504744312/syzkaller.Q3xlJ0/825/bus" dev="sda1" ino=16675 res=1 03:34:19 executing program 1: socket$kcm(0x10, 0x0, 0x4) socket(0x800000002b, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x80000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x4, 0xa492, 0x90, &(0x7f0000000200)="5f76598adaabb108412552987af3c1f2fa53ab87175c7f705fd2e714fa436bab3467506275e52ab9fa3a61b8ff2d85e1d144d9fc2d4434cc2591bbfd2083ca235d5f3e6bf5cee42bca910b675b93f5d2391d3d3802004e1dd3ef915e4bf0be6938d0b142a8253c17f1c9e7d957f93f1ba4e9b2950876f6e380c538879b0eb594a117f13cef8623d8d3f012e9eb5a64b6"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x9, 0x1a6) prctl$PR_CAPBSET_DROP(0x18, 0x20) 03:34:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac187185095cf0400b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) [ 675.966728][T28752] netlink: 'syz-executor.0': attribute type 116 has an invalid length. [ 675.975216][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 675.975327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 676.004906][T28752] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:34:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001d008103e00f80ecdb4cb90405c8650407007400000000fb120003003200000040d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 676.052511][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 676.058386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 676.195897][T28713] syz-executor.5 (28713) used greatest stack depth: 21936 bytes left [ 676.202301][T28889] netlink: 'syz-executor.0': attribute type 116 has an invalid length. [ 676.264924][ T26] audit: type=1804 audit(2000000059.639:153): pid=28863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir124178571/syzkaller.qnWAEQ/877/bus" dev="sda1" ino=16667 res=1 [ 676.282545][T28889] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 676.431653][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 676.438301][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:19 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 03:34:19 executing program 5: socket$kcm(0x10, 0x0, 0x4) socket(0x800000002b, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x80000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x4, 0xa492, 0x90, &(0x7f0000000200)="5f76598adaabb108412552987af3c1f2fa53ab87175c7f705fd2e714fa436bab3467506275e52ab9fa3a61b8ff2d85e1d144d9fc2d4434cc2591bbfd2083ca235d5f3e6bf5cee42bca910b675b93f5d2391d3d3802004e1dd3ef915e4bf0be6938d0b142a8253c17f1c9e7d957f93f1ba4e9b2950876f6e380c538879b0eb594a117f13cef8623d8d3f012e9eb5a64b6"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x9, 0x1a6) prctl$PR_CAPBSET_DROP(0x18, 0x20) 03:34:19 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 03:34:19 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001d008103e00f80ecdb4cb90405c8650407007400000000fb120003003200000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:34:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10fbb020) [ 676.566209][T29042] netlink: 'syz-executor.0': attribute type 116 has an invalid length. [ 676.641882][T29042] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:34:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001d008103e00f80ecdb4cb90405c8650407007400000000fb120003003200000040d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:34:20 executing program 1: socket$kcm(0x10, 0x0, 0x4) socket(0x800000002b, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x80000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x4, 0xa492, 0x90, &(0x7f0000000200)="5f76598adaabb108412552987af3c1f2fa53ab87175c7f705fd2e714fa436bab3467506275e52ab9fa3a61b8ff2d85e1d144d9fc2d4434cc2591bbfd2083ca235d5f3e6bf5cee42bca910b675b93f5d2391d3d3802004e1dd3ef915e4bf0be6938d0b142a8253c17f1c9e7d957f93f1ba4e9b2950876f6e380c538879b0eb594a117f13cef8623d8d3f012e9eb5a64b6"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x9, 0x1a6) prctl$PR_CAPBSET_DROP(0x18, 0x20) [ 676.868150][T29141] netlink: 'syz-executor.0': attribute type 116 has an invalid length. [ 676.877083][T29141] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:34:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 676.992392][ T26] audit: type=1804 audit(2000000060.369:154): pid=29153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir124178571/syzkaller.qnWAEQ/878/bus" dev="sda1" ino=16667 res=1 03:34:20 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 03:34:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10fbb020) 03:34:20 executing program 5: socket$kcm(0x10, 0x0, 0x4) socket(0x800000002b, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x80000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x4, 0xa492, 0x90, &(0x7f0000000200)="5f76598adaabb108412552987af3c1f2fa53ab87175c7f705fd2e714fa436bab3467506275e52ab9fa3a61b8ff2d85e1d144d9fc2d4434cc2591bbfd2083ca235d5f3e6bf5cee42bca910b675b93f5d2391d3d3802004e1dd3ef915e4bf0be6938d0b142a8253c17f1c9e7d957f93f1ba4e9b2950876f6e380c538879b0eb594a117f13cef8623d8d3f012e9eb5a64b6"}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x9, 0x1a6) prctl$PR_CAPBSET_DROP(0x18, 0x20) 03:34:20 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000001c0)={0x0, "b006ba977f182f3a1816afe482a5577134771b2667094168f86f3fe5898c2911aecc681a984a7ba2183e99c70aea52d4a9c14c00cb7298affef345083c126638b28086f5b1998247aba32dc609ab3fb438be3c23ee2c95f728277d69b00a2d0af665f1448bf67d335155973b0e842ae76fe23b91b100"}) [ 677.383784][ T26] audit: type=1804 audit(2000000060.759:155): pid=29265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir504744312/syzkaller.Q3xlJ0/827/bus" dev="sda1" ino=16658 res=1 03:34:20 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 03:34:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x101, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 03:34:21 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000001c0)={0x0, "b006ba977f182f3a1816afe482a5577134771b2667094168f86f3fe5898c2911aecc681a984a7ba2183e99c70aea52d4a9c14c00cb7298affef345083c126638b28086f5b1998247aba32dc609ab3fb438be3c23ee2c95f728277d69b00a2d0af665f1448bf67d335155973b0e842ae76fe23b91b100"}) 03:34:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10fbb020) 03:34:21 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000001c0)={0x0, "b006ba977f182f3a1816afe482a5577134771b2667094168f86f3fe5898c2911aecc681a984a7ba2183e99c70aea52d4a9c14c00cb7298affef345083c126638b28086f5b1998247aba32dc609ab3fb438be3c23ee2c95f728277d69b00a2d0af665f1448bf67d335155973b0e842ae76fe23b91b100"}) 03:34:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 03:34:21 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000001c0)={0x0, "b006ba977f182f3a1816afe482a5577134771b2667094168f86f3fe5898c2911aecc681a984a7ba2183e99c70aea52d4a9c14c00cb7298affef345083c126638b28086f5b1998247aba32dc609ab3fb438be3c23ee2c95f728277d69b00a2d0af665f1448bf67d335155973b0e842ae76fe23b91b100"}) 03:34:21 executing program 2: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_client='access=client'}, {@debug={'debug', 0x3d, 0x101}}, {@fscache='fscache'}], [{@obj_role={'obj_role', 0x3d, ',-trusted*'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>'}}]}}) 03:34:21 executing program 1: clock_nanosleep(0x9, 0x2, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) [ 678.239252][T29491] 9pnet: Insufficient options for proto=fd 03:34:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10fbb020) 03:34:21 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x6, &(0x7f0000000080), 0x4) [ 678.272587][ T26] audit: type=1804 audit(2000000061.649:156): pid=29491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir250602960/syzkaller.EhrNFb/906/file0" dev="sda1" ino=16671 res=1 03:34:21 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x6, &(0x7f0000000080), 0x4) 03:34:21 executing program 1: clock_nanosleep(0x9, 0x2, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) 03:34:21 executing program 2: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_client='access=client'}, {@debug={'debug', 0x3d, 0x101}}, {@fscache='fscache'}], [{@obj_role={'obj_role', 0x3d, ',-trusted*'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>'}}]}}) 03:34:21 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x6, &(0x7f0000000080), 0x4) [ 678.574423][T29713] 9pnet: Insufficient options for proto=fd [ 679.902534][ C0] net_ratelimit: 12 callbacks suppressed [ 679.902544][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 679.914000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 680.132513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.138371][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10fbb020) 03:34:23 executing program 1: clock_nanosleep(0x9, 0x2, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) 03:34:23 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x6, &(0x7f0000000080), 0x4) 03:34:23 executing program 2: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_client='access=client'}, {@debug={'debug', 0x3d, 0x101}}, {@fscache='fscache'}], [{@obj_role={'obj_role', 0x3d, ',-trusted*'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>'}}]}}) 03:34:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10fbb020) 03:34:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 680.213974][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.219775][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 03:34:23 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005000, 0x0) [ 680.291488][T29727] 9pnet: Insufficient options for proto=fd 03:34:23 executing program 1: clock_nanosleep(0x9, 0x2, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) 03:34:23 executing program 2: r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_client='access=client'}, {@debug={'debug', 0x3d, 0x101}}, {@fscache='fscache'}], [{@obj_role={'obj_role', 0x3d, ',-trusted*'}}, {@permit_directio='permit_directio'}, {@uid_gt={'uid>'}}]}}) 03:34:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 03:34:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 680.532507][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 680.538396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 680.737579][T29806] 9pnet: Insufficient options for proto=fd [ 681.092606][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 681.098475][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:34:24 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40184150, 0x0) 03:34:24 executing program 2: clock_gettime(0xfffffffffffffff9, &(0x7f0000000100)) 03:34:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@rose, @rose, @bcast, @netrom, @bcast, @default, @rose]}, 0x48) listen(r0, 0x0) close(r0) 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 03:34:24 executing program 2: clock_gettime(0xfffffffffffffff9, &(0x7f0000000100)) 03:34:24 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x27, 0xaff, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 681.613714][T30016] hfsplus: unable to find HFS+ superblock 03:34:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) 03:34:25 executing program 2: clock_gettime(0xfffffffffffffff9, &(0x7f0000000100)) 03:34:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000000100)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0x4}]}, 0x28}}, 0x0) [ 681.748589][T30016] hfsplus: unable to find HFS+ superblock 03:34:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 03:34:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xd}}) 03:34:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) 03:34:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 03:34:25 executing program 2: clock_gettime(0xfffffffffffffff9, &(0x7f0000000100)) [ 681.954195][T30190] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 03:34:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) 03:34:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000000100)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0x4}]}, 0x28}}, 0x0) 03:34:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xd}}) 03:34:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 03:34:25 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) [ 682.246729][T30252] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 03:34:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) 03:34:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 03:34:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xd}}) 03:34:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000000100)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0x4}]}, 0x28}}, 0x0) [ 682.399991][T30308] overlayfs: failed to clone lowerpath 03:34:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 03:34:25 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 682.528829][T30369] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 03:34:25 executing program 4: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x3) 03:34:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xd}}) 03:34:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) 03:34:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:34:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f00)={&(0x7f0000000000), 0xc, &(0x7f0000002ec0)={&(0x7f0000000100)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0x4}]}, 0x28}}, 0x0) 03:34:26 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xfffffd9b, 0x0, &(0x7f0000000100), 0x0}, 0x9) 03:34:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 03:34:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008151e00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) 03:34:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 682.927617][T30451] overlayfs: failed to clone lowerpath [ 682.928100][T30458] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 03:34:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x10], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 03:34:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) [ 682.989020][T30462] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 683.012754][T30462] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 03:34:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008151e00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) 03:34:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 03:34:26 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 683.264829][T30573] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 683.281521][T30536] overlayfs: failed to clone lowerpath [ 683.306114][T30573] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 03:34:26 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xfffffd9b, 0x0, &(0x7f0000000100), 0x0}, 0x9) 03:34:26 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xfffffd9b, 0x0, &(0x7f0000000100), 0x0}, 0x9) 03:34:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008151e00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) 03:34:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) 03:34:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001580)={0x14, 0x12, 0x301}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000009a0, 0x1013e, &(0x7f0000001540)={r1}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) fdatasync(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$inet6(0xa, 0x6, 0x0) 03:34:27 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xfffffd9b, 0x0, &(0x7f0000000100), 0x0}, 0x9) 03:34:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xfffffd9b, 0x0, &(0x7f0000000100), 0x0}, 0x9) [ 683.593541][T30691] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 683.632523][T30692] overlayfs: failed to clone lowerpath [ 683.666695][T30691] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 03:34:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008151e00f80ecdb4cb904084865160b00030020020000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) 03:34:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)) 03:34:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xfffffd9b, 0x0, &(0x7f0000000100), 0x0}, 0x9) 03:34:27 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dC/\xa6\xbb)p\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xfffffd9b, 0x0, &(0x7f0000000100), 0x0}, 0x9) 03:34:27 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe) 03:34:27 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) open(&(0x7f0000002880)='./file0\x00', 0x0, 0x8f) 03:34:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 03:34:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 03:34:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) 03:34:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)) 03:34:27 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) open(&(0x7f0000002880)='./file0\x00', 0x0, 0x8f) 03:34:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)) 03:34:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 03:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 03:34:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 03:34:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)) 03:34:28 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 03:34:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 03:34:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) [ 685.252556][ C1] net_ratelimit: 18 callbacks suppressed [ 685.252564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 685.264078][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29) 03:34:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 03:34:28 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) open(&(0x7f0000002880)='./file0\x00', 0x0, 0x8f) 03:34:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 03:34:28 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:34:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29) 03:34:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 03:34:29 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfff, 0x800}, 0x18) 03:34:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 03:34:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29) 03:34:29 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:34:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 03:34:29 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfff, 0x800}, 0x18) 03:34:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29) [ 686.142532][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.148362][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 686.372529][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.378362][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 686.452558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.458374][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:29 executing program 3: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) open(&(0x7f0000002880)='./file0\x00', 0x0, 0x8f) 03:34:29 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 03:34:29 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfff, 0x800}, 0x18) 03:34:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 03:34:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 03:34:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:34:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) getpeername$packet(r2, 0x0, 0x0) 03:34:30 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f00000003c0), 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x0, "3bc6526451172e092b683d0dec3266ff4073319fd5194a6cd4305707db6d18c7", 0x3, 0x80000001, 0xffffffffffffff01, 0x2000}) mlockall(0x1) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) 03:34:30 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfff, 0x800}, 0x18) [ 686.772520][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 686.778385][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:34:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x212, 0x4) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0x58) clock_gettime(0x0, &(0x7f0000002900)) recvmmsg(r0, &(0x7f00000027c0), 0x0, 0x0, 0x0) 03:34:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:34:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 03:34:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:34:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) getpeername$packet(r2, 0x0, 0x0) 03:34:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 03:34:30 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) getpeername$packet(r2, 0x0, 0x0) 03:34:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x212, 0x4) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0x58) clock_gettime(0x0, &(0x7f0000002900)) recvmmsg(r0, &(0x7f00000027c0), 0x0, 0x0, 0x0) 03:34:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 690.292564][ C0] net_ratelimit: 12 callbacks suppressed [ 690.292574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.304238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.532549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.538384][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.613310][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.619679][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) 03:34:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:34:34 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) getpeername$packet(r2, 0x0, 0x0) 03:34:34 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f00000003c0), 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x0, "3bc6526451172e092b683d0dec3266ff4073319fd5194a6cd4305707db6d18c7", 0x3, 0x80000001, 0xffffffffffffff01, 0x2000}) mlockall(0x1) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) 03:34:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x212, 0x4) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0x58) clock_gettime(0x0, &(0x7f0000002900)) recvmmsg(r0, &(0x7f00000027c0), 0x0, 0x0, 0x0) 03:34:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:34:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x212, 0x4) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0x58) clock_gettime(0x0, &(0x7f0000002900)) recvmmsg(r0, &(0x7f00000027c0), 0x0, 0x0, 0x0) 03:34:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 690.932547][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 690.938468][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 691.493355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 691.499537][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x212, 0x4) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0x58) clock_gettime(0x0, &(0x7f0000002900)) recvmmsg(r0, &(0x7f00000027c0), 0x0, 0x0, 0x0) 03:34:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:34:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:34:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="213e7ff1f0980c9ed56b50b08e10a9b9f8942fb8b7ce66e729ac2b217f64da5a25", 0x21}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) 03:34:36 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 03:34:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x212, 0x4) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0x58) clock_gettime(0x0, &(0x7f0000002900)) recvmmsg(r0, &(0x7f00000027c0), 0x0, 0x0, 0x0) 03:34:37 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f00000003c0), 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x0, "3bc6526451172e092b683d0dec3266ff4073319fd5194a6cd4305707db6d18c7", 0x3, 0x80000001, 0xffffffffffffff01, 0x2000}) mlockall(0x1) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) 03:34:37 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 03:34:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:34:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:34:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x212, 0x4) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0x58) clock_gettime(0x0, &(0x7f0000002900)) recvmmsg(r0, &(0x7f00000027c0), 0x0, 0x0, 0x0) 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="213e7ff1f0980c9ed56b50b08e10a9b9f8942fb8b7ce66e729ac2b217f64da5a25", 0x21}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="213e7ff1f0980c9ed56b50b08e10a9b9f8942fb8b7ce66e729ac2b217f64da5a25", 0x21}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) 03:34:37 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 03:34:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) 03:34:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="213e7ff1f0980c9ed56b50b08e10a9b9f8942fb8b7ce66e729ac2b217f64da5a25", 0x21}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) 03:34:38 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) [ 695.652534][ C1] net_ratelimit: 18 callbacks suppressed [ 695.652544][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 695.664085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 696.533212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.539425][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 696.772515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.778368][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 696.852934][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.858870][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 697.172496][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 697.178405][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:41 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f00000003c0), 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x0, "3bc6526451172e092b683d0dec3266ff4073319fd5194a6cd4305707db6d18c7", 0x3, 0x80000001, 0xffffffffffffff01, 0x2000}) mlockall(0x1) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0x0, 0x8032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x100a}], 0x1) 03:34:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 03:34:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 03:34:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:34:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) 03:34:41 executing program 3: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) [ 698.064051][ T304] validate_nla: 2 callbacks suppressed [ 698.064137][ T304] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 03:34:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000001500)="050300000100baffffffffff81004912f22c", 0x12, 0x0, 0x0, 0x0) [ 698.197429][ T32] Bluetooth: hci0: Frame reassembly failed (-84) 03:34:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 03:34:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000001500)="050300000100baffffffffff81004912f22c", 0x12, 0x0, 0x0, 0x0) 03:34:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 03:34:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000001500)="050300000100baffffffffff81004912f22c", 0x12, 0x0, 0x0, 0x0) 03:34:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) [ 698.946823][ T727] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 700.214439][ T3479] Bluetooth: hci0: command 0xfc11 tx timeout [ 700.221347][T32448] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 700.692951][ C0] net_ratelimit: 14 callbacks suppressed [ 700.692961][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.704473][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) 03:34:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 03:34:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000001500)="050300000100baffffffffff81004912f22c", 0x12, 0x0, 0x0, 0x0) 03:34:44 executing program 3: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) 03:34:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 03:34:44 executing program 5: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) [ 700.932493][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 700.938398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 700.999984][ T946] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 701.012491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.018321][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:44 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) 03:34:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) 03:34:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) [ 701.269679][ T1148] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 701.298389][ T1142] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 701.332494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 701.338314][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "bc0a52", 0x30, 0x2c, 0x0, @remote, @ipv4={[], [], @multicast2}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "83f725", 0x0, 0x0, 0x0, @dev, @mcast1}}}}}}}, 0x0) 03:34:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) 03:34:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "bc0a52", 0x30, 0x2c, 0x0, @remote, @ipv4={[], [], @multicast2}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "83f725", 0x0, 0x0, 0x0, @dev, @mcast1}}}}}}}, 0x0) [ 701.537899][ T1285] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:34:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "bc0a52", 0x30, 0x2c, 0x0, @remote, @ipv4={[], [], @multicast2}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "83f725", 0x0, 0x0, 0x0, @dev, @mcast1}}}}}}}, 0x0) 03:34:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2001) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) [ 701.725905][ T1296] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 03:34:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "bc0a52", 0x30, 0x2c, 0x0, @remote, @ipv4={[], [], @multicast2}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "83f725", 0x0, 0x0, 0x0, @dev, @mcast1}}}}}}}, 0x0) 03:34:45 executing program 3: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) [ 701.893125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 701.899492][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 03:34:46 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 03:34:46 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) 03:34:46 executing program 5: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) 03:34:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x20000000000001, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0}, 0x10) 03:34:46 executing program 3: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) [ 703.012503][T32448] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 703.019965][ T3479] Bluetooth: hci0: command tx timeout 03:34:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x20000000000001, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0}, 0x10) [ 703.207370][ T1839] Bluetooth: hci0: Frame reassembly failed (-84) 03:34:46 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 03:34:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x20000000000001, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0}, 0x10) 03:34:46 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 03:34:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x20000000000001, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0}, 0x10) 03:34:46 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) 03:34:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 03:34:48 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000000080)) 03:34:48 executing program 5: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) write$cgroup_pid(r2, 0x0, 0xffffffffffffff49) clock_gettime(0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x1802a140) mkdir(0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, r0, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x9}) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) 03:34:48 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000700), 0x298, 0x10400003) 03:34:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x20000000000001, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0}, 0x10) 03:34:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 705.252508][T32448] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 705.260763][ T7834] Bluetooth: hci0: command tx timeout 03:34:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x20000000000001, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0}, 0x10) 03:34:48 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000008c0)=ANY=[], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x81, 0x8, '9P2000.L'}, 0x15) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1023, &(0x7f0000000640)={@multicast2, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x500000000000000) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="7af38143402ad80b50a0ea0e00e8da86f710a89b5ead98db012acbbc5efa2663ced4eb198fee9c64a4523805b6568cde2c7537b9c8a1aa3596bdca4722a6") [ 705.444677][ T124] Bluetooth: hci0: Frame reassembly failed (-84) 03:34:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x20000000000001, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0}, 0x10) 03:34:49 executing program 5: ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r0, 0xd}, 0x10) 03:34:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 03:34:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 706.052557][ C1] net_ratelimit: 18 callbacks suppressed [ 706.052566][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 706.064195][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 706.932546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 706.938505][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 707.172471][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.178244][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 707.262493][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.268252][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:50 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000700), 0x298, 0x10400003) 03:34:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 03:34:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:50 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000008c0)=ANY=[], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x81, 0x8, '9P2000.L'}, 0x15) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1023, &(0x7f0000000640)={@multicast2, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x500000000000000) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="7af38143402ad80b50a0ea0e00e8da86f710a89b5ead98db012acbbc5efa2663ced4eb198fee9c64a4523805b6568cde2c7537b9c8a1aa3596bdca4722a6") [ 707.492502][T32448] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 707.499931][ T7834] Bluetooth: hci0: command tx timeout 03:34:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 707.572652][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 707.578547][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 03:34:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0x0, @in=@dev}}, 0xe8) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 03:34:51 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0xfe34) 03:34:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 708.368335][ T2561] PKCS8: Unsupported PKCS#8 version 03:34:52 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000700), 0x298, 0x10400003) 03:34:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4205, r1, 0x0, 0x0) 03:34:52 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:34:52 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000008c0)=ANY=[], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x81, 0x8, '9P2000.L'}, 0x15) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1023, &(0x7f0000000640)={@multicast2, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x500000000000000) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="7af38143402ad80b50a0ea0e00e8da86f710a89b5ead98db012acbbc5efa2663ced4eb198fee9c64a4523805b6568cde2c7537b9c8a1aa3596bdca4722a6") 03:34:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e23, @remote}}) inotify_init1(0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001400)='/dev/nullb0\x00', 0x8004, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) tkill(0x0, 0x0) 03:34:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4205, r1, 0x0, 0x0) 03:34:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4205, r1, 0x0, 0x0) 03:34:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x4205, r1, 0x0, 0x0) [ 709.960127][ T3132] PKCS8: Unsupported PKCS#8 version [ 711.092531][ C0] net_ratelimit: 12 callbacks suppressed [ 711.092538][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.104046][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0xfe34) 03:34:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e23, @remote}}) inotify_init1(0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001400)='/dev/nullb0\x00', 0x8004, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) tkill(0x0, 0x0) 03:34:54 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000700), 0x298, 0x10400003) 03:34:54 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000008c0)=ANY=[], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, 0x0}], 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x81, 0x8, '9P2000.L'}, 0x15) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1023, &(0x7f0000000640)={@multicast2, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x500000000000000) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="7af38143402ad80b50a0ea0e00e8da86f710a89b5ead98db012acbbc5efa2663ced4eb198fee9c64a4523805b6568cde2c7537b9c8a1aa3596bdca4722a6") 03:34:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 711.333575][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.340173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.412492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.418386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.437678][ T3283] PKCS8: Unsupported PKCS#8 version [ 711.732530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 711.738395][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 712.292534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 712.298424][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e23, @remote}}) inotify_init1(0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001400)='/dev/nullb0\x00', 0x8004, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) tkill(0x0, 0x0) [ 712.704012][ T3932] PKCS8: Unsupported PKCS#8 version 03:34:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 713.128190][ T4143] PKCS8: Unsupported PKCS#8 version 03:34:57 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0xfe34) 03:34:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:57 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) geteuid() getresgid(0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e23, @remote}}) inotify_init1(0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001400)='/dev/nullb0\x00', 0x8004, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) tkill(0x0, 0x0) [ 714.497183][ T4349] PKCS8: Unsupported PKCS#8 version [ 714.540603][ T4410] PKCS8: Unsupported PKCS#8 version [ 714.550438][ T4354] PKCS8: Unsupported PKCS#8 version [ 714.684295][ T4506] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 03:34:58 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) geteuid() getresgid(0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:58 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) geteuid() getresgid(0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 715.246752][ T4806] PKCS8: Unsupported PKCS#8 version 03:34:58 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) geteuid() getresgid(0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) [ 715.563227][ T4955] PKCS8: Unsupported PKCS#8 version [ 716.452543][ C1] net_ratelimit: 18 callbacks suppressed [ 716.452552][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.464094][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 717.332553][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.338421][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:00 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0xfe34) 03:35:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="46ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/90, 0x5a}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:00 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) geteuid() getresgid(0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:00 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) geteuid() getresgid(0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x80000) syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x1, 0x40000) dup3(r0, r0, 0x80000) syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x8000, 0x401, 0x9dac, 0x8, 0x18, 0x9}) syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) [ 717.573245][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.579604][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 717.652497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 717.658367][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) [ 717.975236][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 717.981080][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:01 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7}, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) geteuid() getresgid(0x0, &(0x7f0000000280), &(0x7f00000002c0)) stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/loop-control\x00', 0x180, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:03 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 03:35:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 03:35:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 03:35:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 03:35:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 03:35:04 executing program 1: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200020, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:35:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r1, 0x3, 0x0, 0x408001) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1) fallocate(r1, 0x3, 0x0, 0xfff9) 03:35:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 03:35:04 executing program 5: bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x11}, 0x10) 03:35:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 03:35:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000000c0)) 03:35:04 executing program 5: bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x11}, 0x10) 03:35:04 executing program 2: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125e, &(0x7f0000000000)) 03:35:04 executing program 1: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200020, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 721.492547][ C0] net_ratelimit: 12 callbacks suppressed [ 721.492555][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.504123][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 03:35:05 executing program 5: bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x11}, 0x10) 03:35:05 executing program 2: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125e, &(0x7f0000000000)) 03:35:05 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000002880)=0x7) r5 = dup2(r3, r1) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000280)=[@rights={0x28, 0x1, 0x1, [r5, r0, r5, r1, r2]}], 0x28}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) accept4(r5, &(0x7f0000002680)=@hci, &(0x7f0000002700)=0x80, 0x800) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000007c0), 0x4) 03:35:05 executing program 3: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125e, &(0x7f0000000000)) [ 721.732487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.738391][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:05 executing program 5: bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x11}, 0x10) [ 721.812552][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.818436][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 03:35:05 executing program 3: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125e, &(0x7f0000000000)) 03:35:05 executing program 2: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125e, &(0x7f0000000000)) 03:35:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 03:35:05 executing program 3: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125e, &(0x7f0000000000)) [ 722.132529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 722.138399][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:05 executing program 1: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200020, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:35:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}], 0x2b08063c1e48fce9, 0x0, 0x0}) [ 722.327144][ T6654] binder: 6653:6654 ioctl c0306201 200002c0 returned -14 03:35:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}]}}) 03:35:05 executing program 2: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x400002200006008, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(r2, 0x125e, &(0x7f0000000000)) 03:35:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00'}, 0x48) 03:35:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 03:35:06 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x22195198, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) [ 722.692629][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 722.698630][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}], 0x2b08063c1e48fce9, 0x0, 0x0}) [ 722.755857][ T12] binder: send failed reply for transaction 8 to 6653:6654 [ 722.780120][ T12] binder: undelivered TRANSACTION_COMPLETE [ 722.828961][ T12] binder: undelivered TRANSACTION_ERROR: 29189 03:35:06 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x22195198, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) [ 722.949124][ T6876] binder: 6865:6876 ioctl c0306201 200002c0 returned -14 03:35:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00'}, 0x48) 03:35:06 executing program 1: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004780)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200020, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:35:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 03:35:06 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x22195198, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) [ 723.102859][ T12] binder: release 6865:6876 transaction 12 out, still active [ 723.110549][ T12] binder: unexpected work type, 4, not freed 03:35:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}], 0x2b08063c1e48fce9, 0x0, 0x0}) [ 723.151764][ T12] binder: undelivered TRANSACTION_COMPLETE [ 723.178239][ T12] binder: send failed reply for transaction 12, target dead 03:35:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}]}}) [ 723.267985][ T7096] binder: 7095:7096 ioctl c0306201 200002c0 returned -14 03:35:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) 03:35:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00'}, 0x48) [ 723.338476][ T12] binder: release 7095:7096 transaction 16 out, still active [ 723.362945][ T12] binder: unexpected work type, 4, not freed 03:35:06 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x22195198, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) [ 723.389751][ T12] binder: undelivered TRANSACTION_COMPLETE 03:35:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}], 0x2b08063c1e48fce9, 0x0, 0x0}) 03:35:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00'}, 0x48) [ 723.474720][ T12] binder: send failed reply for transaction 16, target dead 03:35:07 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, &(0x7f0000000380)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') [ 723.558184][ T7153] binder: 7146:7153 ioctl c0306201 200002c0 returned -14 [ 723.594525][ T3479] binder: release 7146:7153 transaction 20 out, still active 03:35:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x5}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}}, 0x0) [ 723.618636][ T3479] binder: unexpected work type, 4, not freed [ 723.646816][ T3479] binder: undelivered TRANSACTION_COMPLETE [ 723.697884][ T3479] binder: send failed reply for transaction 20, target dead [ 723.715479][ T7219] e cgroup2: Unknown parameter '¨6Š›ø]Åcše!­?šteéòcÎZ%š' 03:35:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000240)=@framed={{0xffffffc3, 0xa, 0xa, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='GPL\x00', 0x800, 0xb0, &(0x7f0000000280)=""/176}, 0x48) 03:35:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}]}}) 03:35:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)={0x14, 0x0, 0x102, 0x3}, 0x14}}, 0x0) 03:35:07 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40801, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xbf\xdd~w\xa6\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x82\v\xcde7\x19K\xdc\"b\xf5\x8aY\\P\xf2\xcf\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}]}}) [ 724.411948][ T7425] ntfs: (device loop0): parse_options(): Unrecognized mount option obj_role. 03:35:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)={0x14, 0x0, 0x102, 0x3}, 0x14}}, 0x0) [ 724.462999][ T7425] ntfs: (device loop0): parse_options(): Unrecognized mount option obj_user. [ 724.463584][ T7554] overlayfs: missing 'lowerdir' [ 724.524928][ T7625] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 03:35:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb9040e48ff0112000600d4120000010000000000da01000000a9060015000500", 0x2e}], 0x1}, 0x0) 03:35:08 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x10001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) fallocate(r1, 0x0, 0x0, 0xe439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 724.850751][ T7920] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 03:35:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa805000005000000, 0xc0, 0x0, 0x0) 03:35:08 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40801, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xbf\xdd~w\xa6\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x82\v\xcde7\x19K\xdc\"b\xf5\x8aY\\P\xf2\xcf\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xbf\xdd~w\xa6\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x82\v\xcde7\x19K\xdc\"b\xf5\x8aY\\P\xf2\xcf\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000400)=0x7, 0x4) write(r0, &(0x7f0000000440)="7ae6e3e8793f8bc541648d88ad5a", 0xe) [ 725.326943][ T7999] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 03:35:08 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x10001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) fallocate(r1, 0x0, 0x0, 0xe439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 725.380156][ T7929] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 725.429184][ T7929] ntfs: (device loop0): parse_options(): Unrecognized mount option obj_role. 03:35:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000400)=0x7, 0x4) write(r0, &(0x7f0000000440)="7ae6e3e8793f8bc541648d88ad5a", 0xe) [ 725.485181][ T7929] ntfs: (device loop0): parse_options(): Unrecognized mount option obj_user. 03:35:08 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x10001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) fallocate(r1, 0x0, 0x0, 0xe439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 725.525471][ T8065] ntfs: (device loop5): parse_options(): Unrecognized mount option . [ 725.552378][ T8065] ntfs: (device loop5): parse_options(): Unrecognized mount option obj_role. [ 725.668796][ T8065] ntfs: (device loop5): parse_options(): Unrecognized mount option obj_user. 03:35:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa805000005000000, 0xc0, 0x0, 0x0) 03:35:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000400)=0x7, 0x4) write(r0, &(0x7f0000000440)="7ae6e3e8793f8bc541648d88ad5a", 0xe) 03:35:09 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40801, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xbf\xdd~w\xa6\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x82\v\xcde7\x19K\xdc\"b\xf5\x8aY\\P\xf2\xcf\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000400)=0x7, 0x4) write(r0, &(0x7f0000000440)="7ae6e3e8793f8bc541648d88ad5a", 0xe) 03:35:09 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x10001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) fallocate(r1, 0x0, 0x0, 0xe439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:09 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x10001) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) fallocate(r1, 0x0, 0x0, 0xe439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:09 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40801, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xbf\xdd~w\xa6\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x82\v\xcde7\x19K\xdc\"b\xf5\x8aY\\P\xf2\xcf\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) fallocate(r1, 0x0, 0x0, 0xe439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000001400)="2700000014000707030e0000120f0af010000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r0, &(0x7f0000006500), 0x2c7, 0x0, &(0x7f0000006700)) 03:35:10 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40801, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xbf\xdd~w\xa6\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x82\v\xcde7\x19K\xdc\"b\xf5\x8aY\\P\xf2\xcf\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) fallocate(r1, 0x0, 0x0, 0xe439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:35:10 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x0, 0x0, 0x8}) [ 726.852566][ C1] net_ratelimit: 18 callbacks suppressed [ 726.852574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 726.864096][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:10 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x0, 0x0, 0x8}) 03:35:10 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40801, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xbf\xdd~w\xa6\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x82\v\xcde7\x19K\xdc\"b\xf5\x8aY\\P\xf2\xcf\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x10000000003, 0x9) r2 = dup2(r1, r1) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000000a01f}, 0xc) 03:35:11 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0x80000000000d1}) [ 728.052500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.058319][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x2203, 0x712000) 03:35:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)={0x2c, 0x32, 0x82d, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0xa, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) 03:35:11 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00'}, &(0x7f00000007c0)=0x44) getpgrp(0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x100032, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 03:35:11 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0x80000000000d1}) [ 728.336551][ T9772] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 728.353136][ T9772] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 728.382583][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:35:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)={0x2c, 0x32, 0x82d, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0xa, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) 03:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x2203, 0x712000) 03:35:11 executing program 0: r0 = socket$tipc(0x1e, 0x800000000005, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 03:35:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x10000000003, 0x9) r2 = dup2(r1, r1) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000000a01f}, 0xc) 03:35:11 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'vcan0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local, 'veth0\x00'}}, 0x1e) 03:35:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x3}, 0xffffff3a) [ 728.566443][ T9797] EXT4-fs (sda1): re-mounted. Opts: [ 728.604888][ T9905] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 03:35:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)={0x2c, 0x32, 0x82d, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0xa, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) 03:35:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x3}, 0xffffff3a) 03:35:12 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00'}, &(0x7f00000007c0)=0x44) getpgrp(0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$dmmidi(0x0, 0x8001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x100032, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 03:35:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x10000000003, 0x9) r2 = dup2(r1, r1) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000000a01f}, 0xc) 03:35:12 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'vcan0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local, 'veth0\x00'}}, 0x1e) [ 728.846932][ T9951] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 03:35:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x3}, 0xffffff3a) 03:35:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)={0x2c, 0x32, 0x82d, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0xa, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) [ 729.003528][T10028] EXT4-fs (sda1): re-mounted. Opts: 03:35:12 executing program 0: r0 = socket$tipc(0x1e, 0x800000000005, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 03:35:12 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'vcan0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x4, @link_local, 'veth0\x00'}}, 0x1e) 03:35:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x10000000003, 0x9) r2 = dup2(r1, r1) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000000a01f}, 0xc) 03:35:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x3}, 0xffffff3a) [ 729.192280][T10058] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 03:35:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x599) 03:35:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfb, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x100000003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r0, 0xd}, 0x10) 03:35:12 executing program 0: r0 = socket$tipc(0x1e, 0x800000000005, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 03:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0x4040ae9e, &(0x7f0000000180)={0x0, 0xffff8000}) 03:35:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:35:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x599) 03:35:12 executing program 0: r0 = socket$tipc(0x1e, 0x800000000005, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) [ 729.492486][T10083] binder: 10080:10083 transaction failed 29189/-22, size 0-0 line 2994 03:35:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x599) [ 729.579482][T10083] binder: 10080:10083 transaction failed 29189/-22, size 0-0 line 2994 [ 729.610612][ T3479] binder: undelivered TRANSACTION_ERROR: 29189 03:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000150000000000000000000000010018000000000008001200000003000000000400000000f7ff000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa8}}, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000100)) [ 729.629922][ T12] binder: undelivered TRANSACTION_ERROR: 29189 03:35:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x599) 03:35:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0x4040ae9e, &(0x7f0000000180)={0x0, 0xffff8000}) [ 729.945041][T10343] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 03:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000150000000000000000000000010018000000000008001200000003000000000400000000f7ff000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa8}}, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000100)) 03:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0x4040ae9e, &(0x7f0000000180)={0x0, 0xffff8000}) 03:35:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000150000000000000000000000010018000000000008001200000003000000000400000000f7ff000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa8}}, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000100)) 03:35:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) [ 730.219235][T10517] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 03:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0x4040ae9e, &(0x7f0000000180)={0x0, 0xffff8000}) 03:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000150000000000000000000000010018000000000008001200000003000000000400000000f7ff000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa8}}, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000100)) [ 730.314514][T10523] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 03:35:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) [ 730.466913][T10532] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 731.892538][ C0] net_ratelimit: 16 callbacks suppressed [ 731.892545][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 731.904027][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 732.132527][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.138365][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc038563c, &(0x7f0000000040)={0x980001, 0xe7}) 03:35:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) [ 732.212522][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.218328][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc038563c, &(0x7f0000000040)={0x980001, 0xe7}) [ 732.389637][T10540] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.403305][T10539] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.404226][T10545] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.425042][T10546] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 732.443052][T10542] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.5'. 03:35:15 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc038563c, &(0x7f0000000040)={0x980001, 0xe7}) 03:35:15 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) [ 732.532510][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 732.538358][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:16 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc038563c, &(0x7f0000000040)={0x980001, 0xe7}) [ 732.785363][T10662] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.5'. 03:35:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000000003, 0x0) ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000040)) 03:35:16 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) [ 733.092536][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 733.098420][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:16 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0x3b028fb06411ad30, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz0\x00e\xf8\x81I\xacno\x00ow\xd77U\xa2\x17%\xd6l\x85i\xe6\x1a\xa9Z\xe5(#8\n\x86\x95\x16]\xf7\xaef\xab\xd5\xd4\xe8\x8b\xf6B\xfb\aT\x88%gQ\x8d\x00\x87[\xfa*\xc2!\x1c-\x91P\xc3\xfd\xa8\x87\x05D\xeb\xef\x1d\x16\x0f8\xe5e,\xf4iL\xd0\x9f\xcc\x94\xd9\x1b\xd2=\xba\x05\xe8-+>\x87\r:\xda\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8410}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0128d144d97b2375df082aa7700bfddbdf25110000000800000000040000520000000800d10073697000240003000800eeff4faef96c1bb5c280001400060000000000000000000000000000000800080005000002190006001e0400000200000005000004000300000008000900010000001400010000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffe) ioctl(r4, 0x6, &(0x7f00000006c0)=' \\\b\a\x001_\a\x00\x00\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x401, 0x8, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r2, &(0x7f0000000540)={0x9, @null=' \x00'}, 0x12) r7 = syz_open_dev$sndtimer(&(0x7f0000000700)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000140)=0xfffffffffffffc8d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40485404, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x10, 0x20000000080003, 0xc) socket$alg(0x26, 0x5, 0x0) write(r8, &(0x7f00000004c0)="1f0000000102ffff000200000000000046259d1738be1300f30501000b000600000423ca310000", 0x27) openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="694163b91e2e91cb53c8fbaa839ec0179e70b207ea412ee7f68a2a684d4daa60fac332ce520763810ba523b37c106813d04f9e4e4f5740bda6d0c2430ec8374470dd39e7f96f69979c42c3851b332f8844c26be601bfdc2abd53a5ae4e932e24dadb476b64a2aec6cb30d2263b82ad4e7fb2246dfe7ce2faa264aa98ace60a72ea0908a0ddaa9fa231f6f661ac7042bc132811cf989026f4311f6cbf86f3a354e90cc7e86759c682623fe36765f43063774242c332fb28deec70b738bd1aad55e08f90077bd94f47eb947f4b1a804033b1bb106a391f151f86dfd12ed74af42317", 0xe1}], 0x1) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f00000005c0)={0x5, "6d7ac2b418178b73d4bea43a617daa4238ade36c57dc25932306e68b9e96ebdc", 0x0, 0x3f, 0x2, 0xff17ff, 0xc00, 0xe}) 03:35:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0) 03:35:16 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f0000000040)={0x563}, &(0x7f0000a77ff0), 0x0, 0x8) 03:35:16 executing program 2: getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 03:35:16 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, 0xffffffffffffffff, 0x0, 0x5a) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x402040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0xf2a, 0x10, [0x6b, 0x7ea, 0x0, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1}, 0x7, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000d80)) perf_event_open(&(0x7f000001d000)={0x21, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24002, 0x0) 03:35:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000000003, 0x0) ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000040)) 03:35:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000040)) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x2) fstat(0xffffffffffffffff, 0x0) getgroups(0x9, &(0x7f0000000300)=[0xee00, 0xee01, 0xee01, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r1}, 0xc) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fadvise64(r0, 0x6, 0x0, 0x4) 03:35:17 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f0000000040)={0x563}, &(0x7f0000a77ff0), 0x0, 0x8) 03:35:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000000003, 0x0) ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000040)) 03:35:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) 03:35:17 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f0000000040)={0x563}, &(0x7f0000a77ff0), 0x0, 0x8) 03:35:17 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, 0xffffffffffffffff, 0x0, 0x5a) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x402040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0xf2a, 0x10, [0x6b, 0x7ea, 0x0, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1}, 0x7, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000d80)) perf_event_open(&(0x7f000001d000)={0x21, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24002, 0x0) 03:35:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x80000000003, 0x0) ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000040)) 03:35:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0) 03:35:17 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f0000000040)={0x563}, &(0x7f0000a77ff0), 0x0, 0x8) 03:35:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) 03:35:17 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, 0xffffffffffffffff, 0x0, 0x5a) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x402040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0xf2a, 0x10, [0x6b, 0x7ea, 0x0, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1}, 0x7, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000d80)) perf_event_open(&(0x7f000001d000)={0x21, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24002, 0x0) 03:35:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) 03:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) 03:35:18 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, 0xffffffffffffffff, 0x0, 0x5a) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x402040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0xf2a, 0x10, [0x6b, 0x7ea, 0x0, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1}, 0x7, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000d80)) perf_event_open(&(0x7f000001d000)={0x21, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24002, 0x0) 03:35:18 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x10}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 03:35:18 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, 0xffffffffffffffff, 0x0, 0x5a) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x402040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0xf2a, 0x10, [0x6b, 0x7ea, 0x0, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1}, 0x7, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000d80)) perf_event_open(&(0x7f000001d000)={0x21, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24002, 0x0) 03:35:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) 03:35:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 03:35:18 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000010107081dfffd946fa2830020200a000900120000090000000000000000ff7e", 0x24}], 0x1}, 0x0) [ 734.982668][T11858] __nla_parse: 6 callbacks suppressed [ 734.982679][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.068540][T11937] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 735.093618][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:35:18 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0) 03:35:18 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x10}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 03:35:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 03:35:18 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000010107081dfffd946fa2830020200a000900120000090000000000000000ff7e", 0x24}], 0x1}, 0x0) 03:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) 03:35:18 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, 0xffffffffffffffff, 0x0, 0x5a) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x402040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0xf2a, 0x10, [0x6b, 0x7ea, 0x0, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1}, 0x7, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000d80)) perf_event_open(&(0x7f000001d000)={0x21, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24002, 0x0) [ 735.360003][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 735.371698][T12099] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 735.392549][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) 03:35:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) 03:35:18 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x10}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 03:35:18 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000010107081dfffd946fa2830020200a000900120000090000000000000000ff7e", 0x24}], 0x1}, 0x0) 03:35:18 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@remote, 0x0, 0x800000000000000, 0x2, 0x1, 0xfffffffffffffffd}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x5, 0x1ff, 0x1f, 0x1, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r0, 0xffffffffffffffff, 0x0, 0x5a) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x402040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0xf2a, 0x10, [0x6b, 0x7ea, 0x0, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0x3, 0x3, 0x4a, 0x1}, 0x7, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000d80)) perf_event_open(&(0x7f000001d000)={0x21, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x10000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x24002, 0x0) [ 735.558276][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:35:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0x2001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x30}}, 0x0) [ 735.649869][T12121] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 735.708155][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 735.760011][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:35:19 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000089da0000"], 0x10}}, 0x0) 03:35:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) 03:35:19 executing program 0: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x10}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) 03:35:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) 03:35:19 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000010107081dfffd946fa2830020200a000900120000090000000000000000ff7e", 0x24}], 0x1}, 0x0) 03:35:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='showexec']) [ 735.961584][T12143] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 735.977280][T12144] FAT-fs (loop4): bogus number of reserved sectors 03:35:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) 03:35:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) [ 736.006971][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.017555][T12144] FAT-fs (loop4): Can't find a valid FAT filesystem [ 736.104130][T12144] FAT-fs (loop4): bogus number of reserved sectors [ 736.113102][T12144] FAT-fs (loop4): Can't find a valid FAT filesystem 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'ppp1cpusetYvboxnet1procproc'}}]}}) 03:35:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='showexec']) 03:35:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0xa, @raw_data="4236feaa175479da5955313248661f0e6875893a9d89d2c2cc270a8a359219147a3fe8f8f85f271dcd4d15836842330e8ebfad714ee34433344d76fb1b330c2a8daf2134f178cef8f55eabf0003dd576b5646873cc6485fb9b9f09123c6dcc07d15d2d105903c44f308ea3a56ae4ca0633f0cf36c7847540cee20405ac72cd1d29c4a37b8f9e3fa77ab852d2d8523e9f29c5ccfee19c1dde1b6bb67279009b6df511e7055505e9708d2fd10acd9543fa6ed721d2c7cbf7f4a7db97ab6c4628bf29c53e31029fd146"}) 03:35:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) [ 736.353135][T12196] FAT-fs (loop4): bogus number of reserved sectors 03:35:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140), 0x4) [ 736.421890][T12196] FAT-fs (loop4): Can't find a valid FAT filesystem 03:35:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0xa, @raw_data="4236feaa175479da5955313248661f0e6875893a9d89d2c2cc270a8a359219147a3fe8f8f85f271dcd4d15836842330e8ebfad714ee34433344d76fb1b330c2a8daf2134f178cef8f55eabf0003dd576b5646873cc6485fb9b9f09123c6dcc07d15d2d105903c44f308ea3a56ae4ca0633f0cf36c7847540cee20405ac72cd1d29c4a37b8f9e3fa77ab852d2d8523e9f29c5ccfee19c1dde1b6bb67279009b6df511e7055505e9708d2fd10acd9543fa6ed721d2c7cbf7f4a7db97ab6c4628bf29c53e31029fd146"}) 03:35:19 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x8000008010500d, 0x0) 03:35:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='showexec']) 03:35:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140), 0x4) 03:35:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0xa, @raw_data="4236feaa175479da5955313248661f0e6875893a9d89d2c2cc270a8a359219147a3fe8f8f85f271dcd4d15836842330e8ebfad714ee34433344d76fb1b330c2a8daf2134f178cef8f55eabf0003dd576b5646873cc6485fb9b9f09123c6dcc07d15d2d105903c44f308ea3a56ae4ca0633f0cf36c7847540cee20405ac72cd1d29c4a37b8f9e3fa77ab852d2d8523e9f29c5ccfee19c1dde1b6bb67279009b6df511e7055505e9708d2fd10acd9543fa6ed721d2c7cbf7f4a7db97ab6c4628bf29c53e31029fd146"}) 03:35:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140), 0x4) [ 736.793224][T12445] FAT-fs (loop4): bogus number of reserved sectors [ 736.833385][T12445] FAT-fs (loop4): Can't find a valid FAT filesystem [ 737.253286][ C1] net_ratelimit: 18 callbacks suppressed [ 737.253343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 737.265263][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0xa, @raw_data="4236feaa175479da5955313248661f0e6875893a9d89d2c2cc270a8a359219147a3fe8f8f85f271dcd4d15836842330e8ebfad714ee34433344d76fb1b330c2a8daf2134f178cef8f55eabf0003dd576b5646873cc6485fb9b9f09123c6dcc07d15d2d105903c44f308ea3a56ae4ca0633f0cf36c7847540cee20405ac72cd1d29c4a37b8f9e3fa77ab852d2d8523e9f29c5ccfee19c1dde1b6bb67279009b6df511e7055505e9708d2fd10acd9543fa6ed721d2c7cbf7f4a7db97ab6c4628bf29c53e31029fd146"}) 03:35:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140), 0x4) 03:35:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'ppp1cpusetYvboxnet1procproc'}}]}}) 03:35:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140), 0x4) 03:35:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) 03:35:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='showexec']) [ 737.440784][T12523] FAT-fs (loop4): bogus number of reserved sectors 03:35:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) 03:35:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140), 0x4) 03:35:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) [ 737.514145][T12523] FAT-fs (loop4): Can't find a valid FAT filesystem 03:35:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000140), 0x4) 03:35:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:35:21 executing program 2: r0 = socket$kcm(0x2, 0x80000000002, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect(r0, &(0x7f0000000180)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x2, 0x0) 03:35:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'ppp1cpusetYvboxnet1procproc'}}]}}) [ 738.064802][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) [ 738.132525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.138390][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 738.372521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.378380][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 738.464917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 738.471280][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:35:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'ppp1cpusetYvboxnet1procproc'}}]}}) [ 738.661015][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:35:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) 03:35:22 executing program 2: r0 = socket$kcm(0x2, 0x80000000002, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect(r0, &(0x7f0000000180)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x2, 0x0) 03:35:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) 03:35:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:35:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) 03:35:22 executing program 2: r0 = socket$kcm(0x2, 0x80000000002, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect(r0, &(0x7f0000000180)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x2, 0x0) 03:35:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:35:22 executing program 0: socket$rds(0x15, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) msgget(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) write(r1, &(0x7f0000000340), 0x100000468) get_robust_list(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000100)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) 03:35:22 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000280)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000640)) 03:35:22 executing program 2: r0 = socket$kcm(0x2, 0x80000000002, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) connect(r0, &(0x7f0000000180)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x2, 0x0) [ 739.448196][T13094] overlayfs: './file0' not a directory 03:35:22 executing program 4: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:23 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000280)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000640)) 03:35:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) close(r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000050c0)=""/88) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) 03:35:23 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="d30cb33f6fa967b99c86c9053fb3f203a05dd8637dbdbc92824ae00e1a2fbe732b89afefccc124f153eb18e16f0c51dd41b7aee93f801b5eaf8e83ba1841399bd5634b29766b7095", 0x48) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x5074312b78f0478) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), 0x2cb) 03:35:23 executing program 4: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:23 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000280)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000640)) [ 740.487568][T13414] overlayfs: failed to resolve './file1': -2 03:35:23 executing program 4: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:24 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000280)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000640)) 03:35:24 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 03:35:24 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:24 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 03:35:24 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 03:35:24 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:24 executing program 5: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:24 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:24 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:25 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:25 executing program 4: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x868, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)) 03:35:25 executing program 4: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x868, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)) 03:35:25 executing program 5: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:25 executing program 2: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) [ 742.293619][ C0] net_ratelimit: 16 callbacks suppressed [ 742.293667][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 742.305427][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:25 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000240)) 03:35:25 executing program 1: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) [ 742.532483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 742.538380][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x868, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)) [ 742.612505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 742.618294][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:26 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000240)) 03:35:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000240)='J', 0x1, 0x4004084, 0x0, 0x0) 03:35:26 executing program 2: r0 = socket$kcm(0x2, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2000000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000180), 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000000180), 0x10) 03:35:26 executing program 1: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:26 executing program 5: mknod$loop(0x0, 0x80000003, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r7 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x84, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x78, 0x78, 0x78, 0x38]}, 0x7}}, @acquire_done={0x40106309, r7}, @dead_binder_done={0x40086310, 0x3}, @free_buffer={0x40086303, r8}, @free_buffer={0x40086303, r9}], 0x3c, 0x0, &(0x7f0000000300)="026e062084e6d65b29aff6138f90afad8cd1e22cec7ccdbcd6cc317d9a9e7da5d3563bd66bf9753c1a53cef3ba2fa4b586e15cb5c62d6e028da4f176"}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x868, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)) 03:35:26 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000240)) [ 742.932984][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 742.938857][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @random="99383c6ddaf6", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @empty=0xac141400, @random="eb5de09d9520", @dev}}}}, 0x0) 03:35:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000240)='J', 0x1, 0x4004084, 0x0, 0x0) 03:35:26 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000240)) 03:35:26 executing program 1: r0 = memfd_create(&(0x7f0000000380)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}onh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdd,\xbc\xeccJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xcaD\x1d \xf8\xe0-\xdc\b\x97\x8a\x1e\xc1TTN\xf7b\x02\xab\xb0\xef\xf7\x1e\xd0\xba\xa7\xc6\xb6\x15\xb6\x17\xb4\xecHJ\xa5\xaa\xb9\xdb\xf3\x03\xfaG\xf5\x19\xcc\xf7|\x04\xd2\x9fwd\xd9\xabgT\xe6SI\xb1\x7fZ\xa9\x14\xfd?\x1c9\akt\xeeS\xc8i\xc6\a\xaa\xf3\x127:v\x0fw\x12\xde\xd4\x8fp\xad\tC5\xe1}1\xa4Y\xf5-\xe3Z\x0fP\xdd\xf8\xb67\xc3+\x97\xd3\xe1\x00\x01n\x8c\x90?EV\xd9\xd2H\x8f\x97y\xf5\x9aO\v\xab\x0f^\x99\"q\xc7.E\x04\x851\x034\xe5\xbc~\x02\xd3\xc4\xa6\xcey|%\x80X\xa4\xc9\xc7\x98\xbf\\\x11P\x84\xe0\xb9?\x90RM\xd7', 0x0) write(r0, &(0x7f0000000300)="a85883156f794c", 0x7) ftruncate(r0, 0x7) 03:35:26 executing program 2: r0 = socket$kcm(0x2, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2000000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000180), 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000000180), 0x10) 03:35:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 03:35:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @random="99383c6ddaf6", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @empty=0xac141400, @random="eb5de09d9520", @dev}}}}, 0x0) 03:35:26 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 03:35:26 executing program 2: r0 = socket$kcm(0x2, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2000000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000180), 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000000180), 0x10) 03:35:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000240)='J', 0x1, 0x4004084, 0x0, 0x0) 03:35:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @random="99383c6ddaf6", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @empty=0xac141400, @random="eb5de09d9520", @dev}}}}, 0x0) [ 743.492536][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 743.498392][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:27 executing program 2: r0 = socket$kcm(0x2, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2000000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000180), 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000000180), 0x10) 03:35:27 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @random="99383c6ddaf6", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @empty=0xac141400, @random="eb5de09d9520", @dev}}}}, 0x0) 03:35:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000240)='J', 0x1, 0x4004084, 0x0, 0x0) 03:35:27 executing program 1: r0 = memfd_create(&(0x7f0000000380)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}onh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdd,\xbc\xeccJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xcaD\x1d \xf8\xe0-\xdc\b\x97\x8a\x1e\xc1TTN\xf7b\x02\xab\xb0\xef\xf7\x1e\xd0\xba\xa7\xc6\xb6\x15\xb6\x17\xb4\xecHJ\xa5\xaa\xb9\xdb\xf3\x03\xfaG\xf5\x19\xcc\xf7|\x04\xd2\x9fwd\xd9\xabgT\xe6SI\xb1\x7fZ\xa9\x14\xfd?\x1c9\akt\xeeS\xc8i\xc6\a\xaa\xf3\x127:v\x0fw\x12\xde\xd4\x8fp\xad\tC5\xe1}1\xa4Y\xf5-\xe3Z\x0fP\xdd\xf8\xb67\xc3+\x97\xd3\xe1\x00\x01n\x8c\x90?EV\xd9\xd2H\x8f\x97y\xf5\x9aO\v\xab\x0f^\x99\"q\xc7.E\x04\x851\x034\xe5\xbc~\x02\xd3\xc4\xa6\xcey|%\x80X\xa4\xc9\xc7\x98\xbf\\\x11P\x84\xe0\xb9?\x90RM\xd7', 0x0) write(r0, &(0x7f0000000300)="a85883156f794c", 0x7) ftruncate(r0, 0x7) 03:35:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 03:35:27 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 03:35:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 03:35:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff95, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x7d}}, 0x0) 03:35:27 executing program 1: r0 = memfd_create(&(0x7f0000000380)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}onh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdd,\xbc\xeccJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xcaD\x1d \xf8\xe0-\xdc\b\x97\x8a\x1e\xc1TTN\xf7b\x02\xab\xb0\xef\xf7\x1e\xd0\xba\xa7\xc6\xb6\x15\xb6\x17\xb4\xecHJ\xa5\xaa\xb9\xdb\xf3\x03\xfaG\xf5\x19\xcc\xf7|\x04\xd2\x9fwd\xd9\xabgT\xe6SI\xb1\x7fZ\xa9\x14\xfd?\x1c9\akt\xeeS\xc8i\xc6\a\xaa\xf3\x127:v\x0fw\x12\xde\xd4\x8fp\xad\tC5\xe1}1\xa4Y\xf5-\xe3Z\x0fP\xdd\xf8\xb67\xc3+\x97\xd3\xe1\x00\x01n\x8c\x90?EV\xd9\xd2H\x8f\x97y\xf5\x9aO\v\xab\x0f^\x99\"q\xc7.E\x04\x851\x034\xe5\xbc~\x02\xd3\xc4\xa6\xcey|%\x80X\xa4\xc9\xc7\x98\xbf\\\x11P\x84\xe0\xb9?\x90RM\xd7', 0x0) write(r0, &(0x7f0000000300)="a85883156f794c", 0x7) ftruncate(r0, 0x7) 03:35:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x18, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "aee48537f846daf2"}, 0x2}}]}, 0x2c}}, 0x4) 03:35:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 03:35:27 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 744.048147][T15217] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 03:35:27 executing program 1: r0 = memfd_create(&(0x7f0000000380)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}onh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xdd,\xbc\xeccJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xcaD\x1d \xf8\xe0-\xdc\b\x97\x8a\x1e\xc1TTN\xf7b\x02\xab\xb0\xef\xf7\x1e\xd0\xba\xa7\xc6\xb6\x15\xb6\x17\xb4\xecHJ\xa5\xaa\xb9\xdb\xf3\x03\xfaG\xf5\x19\xcc\xf7|\x04\xd2\x9fwd\xd9\xabgT\xe6SI\xb1\x7fZ\xa9\x14\xfd?\x1c9\akt\xeeS\xc8i\xc6\a\xaa\xf3\x127:v\x0fw\x12\xde\xd4\x8fp\xad\tC5\xe1}1\xa4Y\xf5-\xe3Z\x0fP\xdd\xf8\xb67\xc3+\x97\xd3\xe1\x00\x01n\x8c\x90?EV\xd9\xd2H\x8f\x97y\xf5\x9aO\v\xab\x0f^\x99\"q\xc7.E\x04\x851\x034\xe5\xbc~\x02\xd3\xc4\xa6\xcey|%\x80X\xa4\xc9\xc7\x98\xbf\\\x11P\x84\xe0\xb9?\x90RM\xd7', 0x0) write(r0, &(0x7f0000000300)="a85883156f794c", 0x7) ftruncate(r0, 0x7) [ 744.095541][T15217] bridge0: port 3(gretap0) entered disabled state 03:35:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x56) 03:35:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 744.227958][T15217] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.254125][T15217] bridge0: port 2(bridge_slave_1) entered disabled state 03:35:27 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x10000}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 03:35:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 03:35:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x18, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "aee48537f846daf2"}, 0x2}}]}, 0x2c}}, 0x4) 03:35:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 03:35:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x56) 03:35:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 03:35:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff95, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x7d}}, 0x0) 03:35:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x18, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "aee48537f846daf2"}, 0x2}}]}, 0x2c}}, 0x4) 03:35:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) [ 744.760382][T15494] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 03:35:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x18, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "aee48537f846daf2"}, 0x2}}]}, 0x2c}}, 0x4) 03:35:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x56) 03:35:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 03:35:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 03:35:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 03:35:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff95, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x7d}}, 0x0) 03:35:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x21, 0x0, &(0x7f0000000040)) 03:35:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x56) 03:35:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 03:35:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 03:35:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd24e5463ba3daa1799bbfd17522215e9a14ddcd1d146b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) read(0xffffffffffffffff, 0x0, 0x0) [ 745.261600][T15592] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 03:35:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x10000032, 0x829, 0x0, 0x0, {0x2804, 0x1000000}, [@nested={0xc, 0x2, [@typed={0x8, 0x9, @uid}]}]}, 0x20}}, 0x0) 03:35:28 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923311615fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) 03:35:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)='\x00', 0x1}]) 03:35:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff95, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x5}]}, 0x7d}}, 0x0) 03:35:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x10000032, 0x829, 0x0, 0x0, {0x2804, 0x1000000}, [@nested={0xc, 0x2, [@typed={0x8, 0x9, @uid}]}]}, 0x20}}, 0x0) [ 745.496463][T15735] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:35:28 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local}, 0x10) 03:35:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x10000032, 0x829, 0x0, 0x0, {0x2804, 0x1000000}, [@nested={0xc, 0x2, [@typed={0x8, 0x9, @uid}]}]}, 0x20}}, 0x0) [ 745.634534][T15848] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 03:35:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd24e5463ba3daa1799bbfd17522215e9a14ddcd1d146b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) read(0xffffffffffffffff, 0x0, 0x0) 03:35:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd24e5463ba3daa1799bbfd17522215e9a14ddcd1d146b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) read(0xffffffffffffffff, 0x0, 0x0) 03:35:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923311615fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) 03:35:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x10000032, 0x829, 0x0, 0x0, {0x2804, 0x1000000}, [@nested={0xc, 0x2, [@typed={0x8, 0x9, @uid}]}]}, 0x20}}, 0x0) [ 745.913717][T16014] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:35:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 03:35:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local}, 0x10) 03:35:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923311615fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) 03:35:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551c, 0x0) 03:35:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local}, 0x10) [ 746.239523][T16249] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:35:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551c, 0x0) 03:35:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 03:35:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd24e5463ba3daa1799bbfd17522215e9a14ddcd1d146b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) read(0xffffffffffffffff, 0x0, 0x0) 03:35:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd24e5463ba3daa1799bbfd17522215e9a14ddcd1d146b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) read(0xffffffffffffffff, 0x0, 0x0) 03:35:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923311615fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) 03:35:29 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local}, 0x10) 03:35:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551c, 0x0) [ 746.535722][T16392] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. 03:35:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 03:35:30 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="c1"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc008551c, 0x0) 03:35:30 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "70315bca3838bd1849cfc471f8506e9e9dbcb6ff8ef6677e4db6a20973ea331042588f0456b9baf2b295c7d67cf6d5748e67d8bbe26b5ee1a7966d54290508"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a09e9557a9c50ce8e5944b425aa02346549a96731f0f80fd5729ad03531ab924123081494807c1f95c69612e3e24bc41d8eadbbfe32048eb05c1aaa722639c"}, 0x60) 03:35:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 03:35:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd24e5463ba3daa1799bbfd17522215e9a14ddcd1d146b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) read(0xffffffffffffffff, 0x0, 0x0) 03:35:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000000000b, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000029ca2c5068c6c6810000000095"], 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="a7ad5699603372a3dbadf3e39e7a", 0x0, 0xa09c}, 0x28) 03:35:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x5, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000022016cbd24e5463ba3daa1799bbfd17522215e9a14ddcd1d146b86ab0ffc186fa6e9536fdb02656589a2b2babc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) read(0xffffffffffffffff, 0x0, 0x0) 03:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@updpolicy={0x13c, 0x19, 0xa07, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6, 0x0, 0x2b}, 0x0, @in6=@mcast2}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast}]}]}, 0x13c}}, 0x0) 03:35:30 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "70315bca3838bd1849cfc471f8506e9e9dbcb6ff8ef6677e4db6a20973ea331042588f0456b9baf2b295c7d67cf6d5748e67d8bbe26b5ee1a7966d54290508"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a09e9557a9c50ce8e5944b425aa02346549a96731f0f80fd5729ad03531ab924123081494807c1f95c69612e3e24bc41d8eadbbfe32048eb05c1aaa722639c"}, 0x60) 03:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@updpolicy={0x13c, 0x19, 0xa07, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6, 0x0, 0x2b}, 0x0, @in6=@mcast2}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast}]}]}, 0x13c}}, 0x0) 03:35:30 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="c1"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@updpolicy={0x13c, 0x19, 0xa07, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6, 0x0, 0x2b}, 0x0, @in6=@mcast2}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast}]}]}, 0x13c}}, 0x0) 03:35:30 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "70315bca3838bd1849cfc471f8506e9e9dbcb6ff8ef6677e4db6a20973ea331042588f0456b9baf2b295c7d67cf6d5748e67d8bbe26b5ee1a7966d54290508"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a09e9557a9c50ce8e5944b425aa02346549a96731f0f80fd5729ad03531ab924123081494807c1f95c69612e3e24bc41d8eadbbfe32048eb05c1aaa722639c"}, 0x60) 03:35:30 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "70315bca3838bd1849cfc471f8506e9e9dbcb6ff8ef6677e4db6a20973ea331042588f0456b9baf2b295c7d67cf6d5748e67d8bbe26b5ee1a7966d54290508"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a09e9557a9c50ce8e5944b425aa02346549a96731f0f80fd5729ad03531ab924123081494807c1f95c69612e3e24bc41d8eadbbfe32048eb05c1aaa722639c"}, 0x60) 03:35:30 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "70315bca3838bd1849cfc471f8506e9e9dbcb6ff8ef6677e4db6a20973ea331042588f0456b9baf2b295c7d67cf6d5748e67d8bbe26b5ee1a7966d54290508"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a09e9557a9c50ce8e5944b425aa02346549a96731f0f80fd5729ad03531ab924123081494807c1f95c69612e3e24bc41d8eadbbfe32048eb05c1aaa722639c"}, 0x60) 03:35:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@updpolicy={0x13c, 0x19, 0xa07, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6, 0x0, 0x2b}, 0x0, @in6=@mcast2}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast}]}]}, 0x13c}}, 0x0) 03:35:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="c1"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x70, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x50, 0x2b, [@IFLA_XDP_FD={0x4c, 0x1, {0x9effffff, 0x0, 0x0, 0x0}}]}]}, 0x70}}, 0x0) 03:35:31 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "70315bca3838bd1849cfc471f8506e9e9dbcb6ff8ef6677e4db6a20973ea331042588f0456b9baf2b295c7d67cf6d5748e67d8bbe26b5ee1a7966d54290508"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a09e9557a9c50ce8e5944b425aa02346549a96731f0f80fd5729ad03531ab924123081494807c1f95c69612e3e24bc41d8eadbbfe32048eb05c1aaa722639c"}, 0x60) 03:35:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) 03:35:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffb9, 0x0, 0x0, 0xfffffffffffffeb2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) [ 747.783139][T17065] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:35:31 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "70315bca3838bd1849cfc471f8506e9e9dbcb6ff8ef6677e4db6a20973ea331042588f0456b9baf2b295c7d67cf6d5748e67d8bbe26b5ee1a7966d54290508"}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "a09e9557a9c50ce8e5944b425aa02346549a96731f0f80fd5729ad03531ab924123081494807c1f95c69612e3e24bc41d8eadbbfe32048eb05c1aaa722639c"}, 0x60) 03:35:31 executing program 1: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 03:35:31 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="c1"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:35:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="2300000052008152915a655067d7aee4050c1200136017edcaa3000000003200000000", 0x23}], 0x1}, 0x0) 03:35:31 executing program 1: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 03:35:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x70, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x50, 0x2b, [@IFLA_XDP_FD={0x4c, 0x1, {0x9effffff, 0x0, 0x0, 0x0}}]}]}, 0x70}}, 0x0) 03:35:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) [ 748.153994][T17365] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:35:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffb9, 0x0, 0x0, 0xfffffffffffffeb2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) 03:35:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x70, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x50, 0x2b, [@IFLA_XDP_FD={0x4c, 0x1, {0x9effffff, 0x0, 0x0, 0x0}}]}]}, 0x70}}, 0x0) 03:35:31 executing program 1: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 03:35:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="2300000052008152915a655067d7aee4050c1200136017edcaa3000000003200000000", 0x23}], 0x1}, 0x0) 03:35:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) 03:35:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffb9, 0x0, 0x0, 0xfffffffffffffeb2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) [ 748.406721][T17397] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:35:31 executing program 1: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 03:35:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="2300000052008152915a655067d7aee4050c1200136017edcaa3000000003200000000", 0x23}], 0x1}, 0x0) 03:35:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x70, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x50, 0x2b, [@IFLA_XDP_FD={0x4c, 0x1, {0x9effffff, 0x0, 0x0, 0x0}}]}]}, 0x70}}, 0x0) 03:35:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) [ 748.532511][ C0] net_ratelimit: 16 callbacks suppressed [ 748.532519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 748.538232][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffb9, 0x0, 0x0, 0xfffffffffffffeb2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) [ 748.664457][T17418] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:35:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) 03:35:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffb9, 0x0, 0x0, 0xfffffffffffffeb2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) 03:35:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) 03:35:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="2300000052008152915a655067d7aee4050c1200136017edcaa3000000003200000000", 0x23}], 0x1}, 0x0) [ 748.772520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 748.778423][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffb9, 0x0, 0x0, 0xfffffffffffffeb2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) [ 748.852486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 748.858288][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:32 executing program 0: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 03:35:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) 03:35:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000040)) 03:35:32 executing program 0: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) 03:35:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) [ 749.132192][T17521] ion_ioctl: ioctl validate failed 03:35:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000040)) 03:35:32 executing program 0: r0 = socket$kcm(0x29, 0x1000000000005, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) [ 749.172522][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 749.178361][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffffb9, 0x0, 0x0, 0xfffffffffffffeb2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000487]}) 03:35:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) 03:35:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") unshare(0x4000400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000040)=0xfffe) 03:35:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) 03:35:32 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000040)) 03:35:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) 03:35:32 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r1, 0x1) 03:35:32 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000004000000580f02000000003f420f00000000000000000000030000", 0x38}]) 03:35:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) 03:35:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000040)) 03:35:33 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x5, [0x0, 0x2d9, 0x3]}) 03:35:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:35:33 executing program 3: mkdir(&(0x7f0000000280)='./control\x00', 0x0) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/80, 0x1d) getdents64(r0, &(0x7f0000000340)=""/149, 0x95) 03:35:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) 03:35:33 executing program 3: mkdir(&(0x7f0000000280)='./control\x00', 0x0) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/80, 0x1d) getdents64(r0, &(0x7f0000000340)=""/149, 0x95) 03:35:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r1, 0x1) 03:35:33 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x5, [0x0, 0x2d9, 0x3]}) 03:35:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) 03:35:33 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000004000000580f02000000003f420f00000000000000000000030000", 0x38}]) 03:35:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:35:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r1, 0x1) 03:35:33 executing program 3: mkdir(&(0x7f0000000280)='./control\x00', 0x0) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/80, 0x1d) getdents64(r0, &(0x7f0000000340)=""/149, 0x95) 03:35:33 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x5, [0x0, 0x2d9, 0x3]}) 03:35:33 executing program 3: mkdir(&(0x7f0000000280)='./control\x00', 0x0) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/80, 0x1d) getdents64(r0, &(0x7f0000000340)=""/149, 0x95) 03:35:33 executing program 5: mkdir(&(0x7f0000000280)='./control\x00', 0x0) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/80, 0x1d) getdents64(r0, &(0x7f0000000340)=""/149, 0x95) 03:35:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:35:33 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000004000000580f02000000003f420f00000000000000000000030000", 0x38}]) 03:35:33 executing program 1: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x5, [0x0, 0x2d9, 0x3]}) 03:35:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r1, 0x1) 03:35:33 executing program 5: mkdir(&(0x7f0000000280)='./control\x00', 0x0) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/80, 0x1d) getdents64(r0, &(0x7f0000000340)=""/149, 0x95) 03:35:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:35:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f646800580f02000000003f420f000004000000580f02000000003f420f00000000000000000000030000", 0x38}]) [ 750.612525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.618404][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:34 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000280), 0x0) getegid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x01\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) ioctl(0xffffffffffffffff, 0x8000000000009378, &(0x7f00000000c0)="01000000000000001801000004000000fc232f") 03:35:34 executing program 5: mkdir(&(0x7f0000000280)='./control\x00', 0x0) mount(0x0, &(0x7f0000000300)='./control\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/80, 0x1d) getdents64(r0, &(0x7f0000000340)=""/149, 0x95) 03:35:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) 03:35:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x100000000006, 0x4, 0x20000000008001, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x11) 03:35:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="39000000130009006900000000000000ab0080480a00000046000107000000141900040043000000000000000003f5000000000000ef38bf46", 0x39}], 0x1) 03:35:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x89e8, 0x0) 03:35:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66baf80cb836244186ef66bafc0c66ed440f0171f664360f01be000000008f692098951d3d000066baf80cb80cb3a883ef66bafc0cb800600000ef460f12bc6c00000000430f070f30b9770b0000b800000000ba008000000f300f08", 0x5c}], 0x1, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 03:35:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) [ 752.079643][T18534] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 03:35:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="39000000130009006900000000000000ab0080480a00000046000107000000141900040043000000000000000003f5000000000000ef38bf46", 0x39}], 0x1) 03:35:35 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 752.314993][T18725] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 03:35:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000040)=0x1, 0x1f1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0xc1, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0x20004bc0) 03:35:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="39000000130009006900000000000000ab0080480a00000046000107000000141900040043000000000000000003f5000000000000ef38bf46", 0x39}], 0x1) 03:35:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x89e8, 0x0) 03:35:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x100000000006, 0x4, 0x20000000008001, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x11) [ 752.631024][T18933] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 752.636084][T18848] XFS (loop3): Invalid superblock magic number 03:35:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x100000000006, 0x4, 0x20000000008001, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x11) 03:35:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x89e8, 0x0) 03:35:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="39000000130009006900000000000000ab0080480a00000046000107000000141900040043000000000000000003f5000000000000ef38bf46", 0x39}], 0x1) 03:35:36 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 752.875981][T19021] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 03:35:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x89e8, 0x0) 03:35:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)={0x100000000006, 0x4, 0x20000000008001, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x11) 03:35:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000840)) 03:35:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x17, 0x36, &(0x7f00000002c0)="266c9361c9416003e15715f4516231aac232c3ffd9c68be2df35c1557bf0e1d984e45bb5aed5213f9ce02ca1e94d2cd0656cf867cfef"}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 03:35:36 executing program 5: socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2b4a280930a06000000a84306910000003900170035000c00060000001900150007000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 03:35:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x89e8, 0x0) [ 753.228680][T19143] XFS (loop3): Invalid superblock magic number 03:35:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x89e8, 0x0) 03:35:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCGSTAMP(r1, 0x89e8, 0x0) 03:35:36 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000840)) 03:35:37 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 03:35:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:37 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:35:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000840)) [ 753.724212][T19408] XFS (loop3): Invalid superblock magic number 03:35:37 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 753.778346][T19467] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:35:37 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:35:37 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:37 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 03:35:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x17, 0x36, &(0x7f00000002c0)="266c9361c9416003e15715f4516231aac232c3ffd9c68be2df35c1557bf0e1d984e45bb5aed5213f9ce02ca1e94d2cd0656cf867cfef"}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 03:35:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000840)) [ 754.096943][T19669] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:35:37 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:35:37 executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7, 0xcc01}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 03:35:37 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 754.268774][T19689] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 754.304920][T19674] XFS (loop3): Invalid superblock magic number 03:35:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:37 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 754.476590][T19699] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 03:35:37 executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7, 0xcc01}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 03:35:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="be8dcd1cd1afce59851a33500b4a47fef99c9d5975a127364e151a30019aded85995275fac317a3765eb75997ba36ae3fd4f3bb8a7ec94d55429f778b8af597069ea63e449f7b929a0b3b4dbe851b645293a317e946f9c23752714e6d9a796cf322160e4790473776be2430d0f85db7acf9c5a1e927a3486441fa12e0040d4b4f76c1c612e7ebfc175c40290537e2ceecbbbb6557367d90640f3775f53ab217be70cba55e770f2247de97f733302f344bbfb9dd31cd5962a1ed10656ad1797a92cc3f6ede1f48dc0bb3cfdbe820edbdc546feedea02122101f4afb60122fd2fcc9ccbb0834acd5d2c7f1ab4b22f0c7f628cf95da45b3eb4fc24de9e89347b8c6eeb7c85d85e09042deea2a10e1380bc3b64dc2ab2a5e141a57c6547006d4176ce539fd09115a79c1bf87786e327f5a1f4139fdfe719323f0c5f700c3847dd67eea6d7ddd946e748cd84f85f7f6b8b0b03ffc441302b1d3eb2c30bd9054250b6b86335c8285fff7bc758a7aaa1644bd88e8c47f1cb60248c3d9199cde6b579655d9a55aabde91e3a78dc7ecfffb6fcf5b252804eb9c71ac9190278905256567355bc8b89abb6ef0d8899b88e525a2ba39740d9b384b15dcf5fbe732927c1ef2ff77747341004ee0ba3f3f326acedc59357a696a231914d5e294798b4c572630547e1cdb58078e8bac6cea911d114c58e9f0595fd2c89d0369e838a37e1b46a34e03c9ddf332632e84ee0058f3f89d85817286a93b4d1aab3cd3a1f2619030987dbcd83cbb92741943747009623303174bb50b221b32167427995e0d8356e11de63b9a749f03112b964c0cb833e01788b3ae3e8e7442b4caaf5055c8de5a219d6f3e0d1815c2d10a58055f80c8db9b240507248cd223ac3545d290bb7b45f51c171d10232c4d3139adaf4fb31882d53b94a5145e0297736737d08540a4af55df3946890d4ee2559b4d4545027256dbab906f8c464c09589166ff9d81618dbc72ed5bd4f1153cbe8d47d73ef441175799c29cd29305bc34d424d9e06e33aba29151a296cb99a1d8d54ba79609dfca8314fb0f34714ebfe095cca0e349e4c932c73ff5aaae4642bbc1815367abd6800e8a5e4aa19cfac9c88e4d55f456050b8f47b24469738a30dada6778d05f74706c0dececaab7dcdcb485388e6fd11c9205ffe018711357c708e83c1944a930741dd846b6d075b952ee60ede335f54c7a99dd776a769c1454d2f6a89a7a65aa1666e453bc00b94373d7eb611f5acf879df2070a3e042d9e2c9c6ef5cd4afeedfb9f145e501b0e95bf7021fea4af1238955954250223f2f2700cff4087567d365d60051f368a9c10ffb641c77d02d65798624731c4cc0fcc4c001407f0794898a54b445bb2daf1a81785826661741d5f99aead7267f77d72979fdc62ecc6e069a37bfeb679a781670a4e696672319b2e4531b970c4c7ce2dbcafb81e6728c86f87846b3c4d91e3f95c1eb0bc6885f928f5720e02d3bde29c48a983cd8c885f25e265c5c11caf8d8c9f06bd6ee0041db79aa1c08b08c702be6a6861f1221f8de268eaeff03a7743dbf4cb72d074bcc2c477176cdb0f93c3a81c80724eee3c29ede9001a50fd14b2e92fff0fca498cdcf6dbaee3a02cf8bc4bb78c1b5fd129bd028bb43ebd15612060b4a1c97dcc4268867f9c864ff9c4ba11a6ea066e0b5de2f24f1e0c0264909734a73abb50955034d758fbcf432c4e9f5fe2090f4727fecbb1f2bc674e55519e32788246e797abf58d8dc262626bd6063ed9503331b5148c9f35d4435287c5f915e5fed7ade72d6b90be83b4443f87f564bda69baeac75a4f20af0c228fd0b14d7864e16b8bce989562bfa72c6113ea620b8e96687fb5dc711808e34aad466c39ed11dce5daefbbc0ac773b66857e7482f6474516505eae4e83aaf9cd0bf7a15c29eff3401d56c045715302ae59ae9bd8697b64cc538209342d30276b67cac8e8c70aacec8434542357d30b25fba709ee2c40966879ba9014c62e99bcf4be3d599003cc5a9cfa3454f088b95562f28b9e8689ddddd4cfd0b4272a75f3c1f6e7d0dff07d8eaa400aa5d8c2d95777900a5eb079de255cbfbfa4b3e3d4f8c44e5911336cd6b2ea1f78668a4fac6a65382efcacfe77713329599f02da120b27d796bc5aefb4fd8e1c74d22f889f9457679b86921e53e5e036564c8f0c4a2eacedb98f41bfe6d19b182cc3c54512186f50cd760d89b55063105812fa1705525a102e6bda53b4fc8fb18bd60bf2d019ba152d85a3eae80ba238e656085c629300fd94e537dcedbc496a119291af41f61988ea8d272571e9b299edb8bdb816d77767ee31aa54772b54a324888b4e10449745f49d736f4785b51a26a249a42f1ce0e48fd3de98178478bb8609bed2374a4974da14001612ee8c95c85ae39f77bd0ce7204aeb3da6d529a0ec28259de836fd0e3169a8e7256c627ceee945ea67e938b2cead4eb16672ce2a7f1d6fa21de7b85013049a0512d3d585ff9111de3b8dc0874e3a36c93eecbee00ea690ab3f11976388a12b0b5695a35c4ba9c41048c5ed60dae5fa4dd36d4ae383cbcc4c007ce396e3a7afe2a4695177c34bff8bca077d7933e4fe21e82ecb227930ef103d2c0fba740c00ed96c05dc88b7f334038089619a68be59155b68e88f1e23e33a0a69b7053e0cf9197c87393a932319dc1c1c6cac662e20880fda85b3f406864e477eb51d9f9c030ccf6e131144c817e88cd9b038fe1bf4045126560dad329750aa49b6577762b23ae77e316fa19b4b8af3341fad0f404036630354cdb39bdf63dc16b98cf99b6400a0a6732d519684d095001b5e7087445c3a990c69036bc511063903290faede529d02d5e3f454bf95f1295e5a9a318666fbfce09eae029cb23ae704c15c4c414a713ac9f9425c1169ef1188f4458a1989a00d5ae02246cad67b065f7bf9b5fd873302cfa9837af9134c4bb3cb8271476959e78c9ee5d9b9bf63f4fac65e0e365a31b4824b18c0af12b6503a676defbb5db14ecc29aab07d2e48f6031a048aa497745ecd4c580fe78524d9444ff9590a67332d0a0577e8753b631229430d3ec9758e41e006e39677db73e9819cda45d752d4ca86d07204f619842d2c89923cc975bf75b5bb6d32f8c180ba2205aaf5308dfe7e1f4a99bb8f6aeb8cc3c77f82975ed28ca130598f1c4cdb53949da69fe3d7b6ebd9bbb60578891a095f6535a77bbdb78b3c768d9daeb7e015810167f830579929bb367fe277343a8977009a9c93b44ec459664ce8fa1782085a096f1026ae9c0b498c7c9c3b94d8c0f49e8ed3fc6f50c7dc497480ed486906324950e5cc64b316aac07f7d9cd78ed24ce41423c375a6b14786af02bc729b6b68dd6acaa125261fb46db42274a12c2d88c4791ea525b7e71287c6ecb5098c1e04b17aa868db6c22960a081ccfef545e487fc9f88351fc4ba93ec470a415b23aa56792f05d4c6241697314d599499c6e91c25de91e4457b0533ec3a60776a2e6c89447ec5124dda704d3df516c032a38bf6011a30fac1538b9b36eb298ac87573829f6a00aa73957409637dfde64cb90703439a9abb245c9fd1d84ceee0462ca415d802aabcde30e99e9a825ed5900966cf963193217d5cb995cd1ca6c6b6859368740dbd3f6b8a3910d012b4cd72e3c9454a5d410c7550f389a22006cd095f41e6526d32f37095c30dfb43991f3826d3041f72e376a6789f99e153e128e00ed2ce7169b89be72874ff5884bb4f65aa02cc529ab141360ef19f7cac68c64b2b421ce4f93a7453312c734cd91c2300feb9afe6777309cdd3bcc198502301c3b0829caf11162dd3889e98f177e2f0809ac010376c94b8e00e48c8134c4e85099d6d6feb11846cf9224dafdee41d44f6da501cd1fec83c683aaf35ce3c7d791dd6f87b9ba1c0b42d91f3d309be3eefbbeb09a4667c01699e91a5d232caebb514d4c2d4b7910fc7f7dcc996f217be773328e53d49a499f6b4398c9071ca1e66e13229b16ee93a73195f4153217613558f72c21b609d83aa5825ad3eb9d1d78272ac3d93af389abc6b22ecbeea09a8986daf559530ca290e7c345d2be7c62f07108046e97392885d19422bf78808c724c1778edc784a94fd783cbed9cdd826337ffb4aa9cd5505ab11eaa7b9593055a6524a753b0a14b02f70d0f5b3bb4bbda2c374135eae334dce3b288fc4b9722d9bfee88ed3dedb486098e800f9891d3f1cb73728a6cce18ef71aeb45141a4a865147d229b501d563efeb6a4aba1e9a34a616d71577b7687c8f0e81ab5fc79b2b62bef25ef51b13e6d078e835d02a040f8a03564182d36c50c78da528d71f9c6f757c0de0e8a3497545430d00a5d1528f18a5afb239bc0ec6e7d12476ca85889a410a6d383acbafd3fbc694ea784e5af0dbcb030551757138073fdc3f10aca7b8143b79bf713e49e3bf190af4c50bc8f9fec511b53da7eb87073f55c2f7be36abcf00875fdd1b16c405a9c2d7f9143edf7dba64dff2ea2579f087a15d9eec82959927494085070e617b0c156449d9500d6f05a420c7a83d1830b543eee107546af5c9a68832d181a9e446dac261189aab0daac1b6f03d87773f890dd7598e446ca4b6ca037b318e22b4f60c7ac1c07300c17c99ff0eae3c49c72117ed87932acd45a4d076fbef3a623a52bb5333afea9cff13318f0e063141ba69077127581d048024d37678ef781530d5d67d4c136e116912e96ddc0a37b67e6780bcef99fea785f305cc8438844b2f12706a44f6f2f1a81802e8c3dc8c54019dca77f4367d3aacc6d4b76bdd86dac698d5ae71eb886cccf90e5e67023e01db8bd2a1e6dcba403d17aa5f0ed241d23b30cbf644b1cc9d8cf13a38ceb65589ed54fb26097f27845ee07c7040806dcfc22634e00760b405084554ecffcd91badcadf8d45e5381f87b0e5b496191c13b9465126fc6b7265b8b7600900bd559eec32662d25a79efcf7c7529ae2f3ac284ef7c47d7a531a487dcaff173c0d03739449fadc5c3f21629630be1c4f9236e5bca9826cb98d350cd90c9c82f253f2d08ad62d2700cb5dd868be792156dd95ea1da926a010a449729cbb75d7a336a6e6f302c1aea978699bf594b4c9e6fa17e17a1e8a24acb89dea4be5d087d83fca50349a0bdd031d02265b09a76f7f3e7b35cdce9d3aa91f836074e0308578ad82e5e587bc1bcce0e4b0de8dad9e6f1b0878344d88c8883496bd2e5ecc9e41b0d9929a36fb7868bdd4c1da7ea2964f47e9a4150724f73645460034f61f5cdf5b1c8750f9e55458cbf28d83081f4c61b39a140c3d792bdd0275d70bd8cb388e14d18c87aea380a2dfd52f56c02d5edab12995f98860e6be689595d79d1552c9854a4c31c90c9e6b427d74daf25e0867acf31b2355a03e7af240f752f073cb97d264b9f110e7707c2ed3e46973751faf0b6e9114f88254398a750db314d9e9242f5409e3ad879b38f5ea13bd085bac8bbc18d13653ca6dcbb0a976b2bf33a5b3c9bfb4548b9c639edf64724498ed4046cbe6eef65f503f1801c6d1178f22974fe35296dc5e46b0af2aefcc63c1179814702fd6f242ee90dc02c1fb420c248b5f13976f5fad5856c2271e0e1c5eba95e1c9f48b84c23c9fc8d8edef435aac2fd3180c29bef1aea33a9e18f1cca241951ab7c8c9f0de54cd721151bf5c13ee05bd8594b7cdca679899a9a678a9867ebb26b232f53f946e07ccbea9aeff6963b9494009c76b493ac07db1e0db84df64195bd062476e94170d147782cef92f402d0440c8a1e503e2e524b212c7a838a409", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:38 executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7, 0xcc01}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) [ 754.772596][ C0] net_ratelimit: 14 callbacks suppressed [ 754.772605][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 754.784174][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x17, 0x36, &(0x7f00000002c0)="266c9361c9416003e15715f4516231aac232c3ffd9c68be2df35c1557bf0e1d984e45bb5aed5213f9ce02ca1e94d2cd0656cf867cfef"}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 03:35:38 executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7, 0xcc01}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 03:35:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) [ 755.012559][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.018419][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:38 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) fallocate(r1, 0x10, 0x0, 0xe439) 03:35:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) [ 755.092486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.098321][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) [ 755.412537][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 755.418626][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x17, 0x36, &(0x7f00000002c0)="266c9361c9416003e15715f4516231aac232c3ffd9c68be2df35c1557bf0e1d984e45bb5aed5213f9ce02ca1e94d2cd0656cf867cfef"}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 03:35:39 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) fallocate(r1, 0x10, 0x0, 0xe439) 03:35:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:39 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) fallocate(r1, 0x10, 0x0, 0xe439) 03:35:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:39 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) fallocate(r1, 0x10, 0x0, 0xe439) 03:35:39 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0xb, 0x4, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 03:35:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:35:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x400) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x40, &(0x7f00000005c0)={[{@xino_auto='xino=auto'}, {@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}], [{@obj_user={'obj_user', 0x3d, '/dev/video#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'system'}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '/dev/hwrng\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x30, 0x77, 0x7f, 0x39, 0x61], 0x2d, [0x36, 0x3f, 0x37, 0x32], 0x2d, [0x37, 0x37, 0x38, 0x61], 0x2d, [0x64, 0x77, 0x31, 0xa787b2f8a1420c01], 0x2d, [0x7f, 0x39, 0x34, 0x37, 0x65, 0x77, 0x0, 0x31]}}}]}) ptrace(0x4208, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000daff00"], 0x1) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000580)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) getrandom(&(0x7f0000000240)=""/40, 0x259, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe9d) io_setup(0x9, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000008c0)='fou\x00') ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) get_thread_area(&(0x7f0000000200)={0x0, 0x0, 0x400, 0x9, 0x8000, 0x0, 0x0, 0x400, 0x0, 0x7}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80), 0x4) mq_timedsend(r1, &(0x7f0000000ac0)="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", 0x1000, 0x95, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0xe7}]}}) 03:35:39 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0xb, 0x4, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 03:35:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, 0x0, 0x0) 03:35:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8012004000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote}}, [0xffffffff, 0x6, 0x3, 0x0, 0x9, 0x41e, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x0, 0x10001}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, 0x0, &(0x7f0000000500)) 03:35:39 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0xb, 0x4, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 03:35:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, 0x0, 0x0) 03:35:40 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000602000/0x3000)=nil, 0x3000}, 0x1}) 03:35:40 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0xb, 0x4, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 03:35:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, 0x0, 0x0) 03:35:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]}) 03:35:40 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000602000/0x3000)=nil, 0x3000}, 0x1}) [ 756.852504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 756.858432][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:40 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x9, 0x0, 0x0) 03:35:40 executing program 4: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) [ 756.975588][T20953] kvm [20854]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 757.113928][T20953] kvm [20854]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 03:35:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x11, 0xecf}], 0x18) 03:35:40 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000602000/0x3000)=nil, 0x3000}, 0x1}) 03:35:40 executing program 1: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000040)="1020f5f20100070009000000030000000c", 0x11, 0x1400}], 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") 03:35:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]}) 03:35:40 executing program 4: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:40 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000602000/0x3000)=nil, 0x3000}, 0x1}) [ 757.536108][T21122] kvm [21121]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 03:35:41 executing program 1: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]}) 03:35:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x11, 0xecf}], 0x18) 03:35:41 executing program 4: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:41 executing program 5: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) [ 757.931354][T21289] kvm [21262]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 03:35:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x11, 0xecf}], 0x18) 03:35:41 executing program 5: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:41 executing program 1: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:41 executing program 4: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]}) 03:35:41 executing program 5: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x11, 0xecf}], 0x18) 03:35:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) [ 758.476428][T21362] kvm [21361]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 03:35:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:42 executing program 1: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r0, 0x0) stat(0x0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) 03:35:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:44 executing program 2: r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 03:35:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) [ 761.012540][ C0] net_ratelimit: 14 callbacks suppressed [ 761.012548][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.024060][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:44 executing program 2: r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 03:35:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) [ 761.252547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.258479][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) [ 761.332534][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.338300][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:44 executing program 2: r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 03:35:44 executing program 2: r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 03:35:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000075a000/0xe000)=nil, 0xe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 761.652534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 761.658440][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000075a000/0xe000)=nil, 0xe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:35:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) fsetxattr(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="6f73322e9af62e2f2773cb9daee90d6a8bbe1ec279737465000000003f00000000000000636c5f6163636573"], 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000001c0)=0x60) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x2000}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000040)) r7 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r8 = request_key(0x0, &(0x7f0000001800)={'syz', 0x1}, &(0x7f00000016c0)='\x00\x00\x00\x00\x8c\x00', r7) keyctl$unlink(0x9, r8, r7) close(r6) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x4, 0xb2784d8c5cde2f89}, 0xc) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001840)={{{@in=@remote, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001940)) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000019c0), 0x80000) getpeername$packet(r4, &(0x7f0000001a00), &(0x7f0000001a40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@empty, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000001b80)=0xe8) getsockname$packet(r4, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) accept4$packet(r6, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c80)=0x14, 0x80800) getsockname$packet(r2, &(0x7f0000001d80), &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@ipv4, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xffffffffffffff6b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001fc0)={{{@in=@loopback, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002200)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000002240)={@multicast2, @multicast2}, &(0x7f0000002280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002580)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002500)=0x9d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002d40)) getsockname$packet(r6, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0x10) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000f1dff8)={0x0, r6}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0xfffffffffffffffa, 0x5}]}, 0x8) write$FUSE_LSEEK(r6, &(0x7f0000000200)={0x18, 0x0, 0x1}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 03:35:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000075a000/0xe000)=nil, 0xe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:35:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000075a000/0xe000)=nil, 0xe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 03:35:45 executing program 4: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fec000/0x14000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4ffd) mremap(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmdt(r1) 03:35:46 executing program 5: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6003, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 03:35:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0000103}]}) 03:35:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) 03:35:46 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/149, 0x3}, {&(0x7f0000000200)=""/192, 0xc0}], 0x2, 0x0) 03:35:46 executing program 4: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fec000/0x14000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4ffd) mremap(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmdt(r1) 03:35:46 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:46 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/149, 0x3}, {&(0x7f0000000200)=""/192, 0xc0}], 0x2, 0x0) 03:35:46 executing program 4: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fec000/0x14000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4ffd) mremap(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmdt(r1) 03:35:46 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/149, 0x3}, {&(0x7f0000000200)=""/192, 0xc0}], 0x2, 0x0) 03:35:46 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:46 executing program 4: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fec000/0x14000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4ffd) mremap(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmdt(r1) [ 763.092496][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 763.098313][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x88}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x496, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) 03:35:46 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='user\x00', 0x0) 03:35:46 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x1, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000100)=""/149, 0x3}, {&(0x7f0000000200)=""/192, 0xc0}], 0x2, 0x0) 03:35:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 03:35:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) 03:35:46 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x88}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x496, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) 03:35:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3, 0x5, 0x24}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 03:35:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) 03:35:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x88}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x496, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) 03:35:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) 03:35:47 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:35:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='user\x00', 0x0) 03:35:47 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x2000000081}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 03:35:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3, 0x5, 0x24}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 03:35:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x88}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x496, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) [ 763.905582][T23793] BUG: assuming atomic context at kernel/seccomp.c:271 03:35:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='user\x00', 0x0) [ 763.957636][T23793] in_atomic(): 0, irqs_disabled(): 0, pid: 23793, name: syz-executor.4 03:35:47 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) 03:35:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3, 0x5, 0x24}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) [ 764.061028][T23793] no locks held by syz-executor.4/23793. [ 764.097486][T23793] CPU: 0 PID: 23793 Comm: syz-executor.4 Not tainted 5.0.0-rc7-next-20190220 #39 [ 764.106625][T23793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.116692][T23793] Call Trace: [ 764.120006][T23793] dump_stack+0x172/0x1f0 [ 764.124380][T23793] __cant_sleep.cold+0xa3/0xbb [ 764.129171][T23793] __seccomp_filter+0x12b/0x12b0 [ 764.134123][T23793] ? seccomp_notify_release+0x280/0x280 [ 764.139684][T23793] ? kasan_check_write+0x14/0x20 [ 764.144635][T23793] ? _raw_spin_unlock_irq+0x28/0x90 [ 764.149839][T23793] ? do_seccomp+0xa5a/0x2250 [ 764.154435][T23793] ? _raw_spin_unlock_irq+0x28/0x90 [ 764.159694][T23793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 764.164984][T23793] ? trace_hardirqs_on+0x67/0x230 [ 764.170021][T23793] ? kasan_check_read+0x11/0x20 [ 764.174976][T23793] ? _raw_spin_unlock_irq+0x5e/0x90 [ 764.180202][T23793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 764.186467][T23793] ? do_seccomp+0x389/0x2250 [ 764.191075][T23793] __secure_computing+0x101/0x360 [ 764.196114][T23793] syscall_trace_enter+0x5bf/0xe10 [ 764.201240][T23793] ? trace_event_raw_event_sys_exit+0x290/0x290 03:35:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x0, 0x8001, 0x10003}}, 0x14) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000240)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x1, 0x42c081) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$rds(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1}, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) [ 764.207501][T23793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 764.212795][T23793] ? trace_hardirqs_on+0x67/0x230 [ 764.217833][T23793] do_syscall_64+0x479/0x610 [ 764.222434][T23793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.228349][T23793] RIP: 0033:0x45ac8a [ 764.232253][T23793] Code: 25 18 00 00 00 00 74 01 f0 48 0f b1 3d df ba 5f 00 48 39 c2 75 da f3 c3 0f 1f 84 00 00 00 00 00 48 63 ff b8 e4 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 c7 c2 d4 ff ff ff f7 [ 764.251890][T23793] RSP: 002b:00007f796fd42c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 03:35:47 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x5) add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='user\x00', 0x0) [ 764.260330][T23793] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac8a [ 764.268351][T23793] RDX: 0000000000002b4c RSI: 00007f796fd42c60 RDI: 0000000000000001 [ 764.268362][T23793] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 764.268371][T23793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.268381][T23793] R13: 00000000004c4cd5 R14: 00000000004d8890 R15: 00000000ffffffff 03:35:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3, 0x5, 0x24}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) 03:35:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkall\x86r\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) 03:35:47 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x2000000081}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 03:35:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="2957e1311f16f477671070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) 03:35:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:48 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x2000000081}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 03:35:48 executing program 0: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:48 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkall\x86r\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) [ 764.836560][T23846] attempt to access beyond end of device [ 764.886733][T23846] loop3: rw=2049, want=130, limit=112 [ 765.070818][T23948] attempt to access beyond end of device [ 765.111283][T23948] loop3: rw=0, want=130, limit=112 03:35:48 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) 03:35:48 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x2000000081}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) 03:35:48 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkall\x86r\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) 03:35:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="2957e1311f16f477671070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) [ 765.257105][T24320] BUG: assuming atomic context at kernel/seccomp.c:271 03:35:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="2957e1311f16f477671070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) [ 765.345184][T24320] in_atomic(): 0, irqs_disabled(): 0, pid: 24320, name: syz-executor.4 03:35:48 executing program 0: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:48 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkall\x86r\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) [ 765.409674][T24320] no locks held by syz-executor.4/24320. [ 765.457931][T24320] CPU: 0 PID: 24320 Comm: syz-executor.4 Tainted: G W 5.0.0-rc7-next-20190220 #39 [ 765.468439][T24320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.468447][T24320] Call Trace: [ 765.468475][T24320] dump_stack+0x172/0x1f0 [ 765.468503][T24320] __cant_sleep.cold+0xa3/0xbb [ 765.491071][T24320] __seccomp_filter+0x12b/0x12b0 [ 765.496058][T24320] ? seccomp_notify_release+0x280/0x280 [ 765.501619][T24320] ? kasan_check_write+0x14/0x20 [ 765.506583][T24320] ? _raw_spin_unlock_irq+0x28/0x90 [ 765.511785][T24320] ? do_seccomp+0xa5a/0x2250 [ 765.516389][T24320] ? _raw_spin_unlock_irq+0x28/0x90 [ 765.521600][T24320] ? lockdep_hardirqs_on+0x418/0x5d0 [ 765.526906][T24320] ? trace_hardirqs_on+0x67/0x230 [ 765.526936][T24320] ? kasan_check_read+0x11/0x20 [ 765.526954][T24320] ? _raw_spin_unlock_irq+0x5e/0x90 [ 765.526983][T24320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 765.527002][T24320] ? do_seccomp+0x389/0x2250 [ 765.552942][T24320] __secure_computing+0x101/0x360 [ 765.557980][T24320] syscall_trace_enter+0x5bf/0xe10 [ 765.563113][T24320] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 765.569390][T24320] ? lockdep_hardirqs_on+0x418/0x5d0 [ 765.574719][T24320] ? trace_hardirqs_on+0x67/0x230 [ 765.579751][T24320] do_syscall_64+0x479/0x610 [ 765.584382][T24320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.590295][T24320] RIP: 0033:0x45ac8a [ 765.594212][T24320] Code: 25 18 00 00 00 00 74 01 f0 48 0f b1 3d df ba 5f 00 48 39 c2 75 da f3 c3 0f 1f 84 00 00 00 00 00 48 63 ff b8 e4 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 c7 c2 d4 ff ff ff f7 [ 765.614020][T24320] RSP: 002b:00007f796fd42c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 765.622432][T24320] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac8a [ 765.630397][T24320] RDX: 0000000000002a1b RSI: 00007f796fd42c60 RDI: 0000000000000001 [ 765.638370][T24320] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 765.646359][T24320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 03:35:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000180)="2957e1311f16f477671070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x0) [ 765.654329][T24320] R13: 00000000004c4cd5 R14: 00000000004d8890 R15: 00000000ffffffff [ 765.954566][T24339] attempt to access beyond end of device [ 765.960490][T24339] loop3: rw=2049, want=130, limit=112 03:35:49 executing program 4: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:49 executing program 2: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:49 executing program 0: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:49 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:49 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) 03:35:49 executing program 1: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:49 executing program 0: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:49 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:50 executing program 2: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:50 executing program 4: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) [ 766.653741][T24611] attempt to access beyond end of device [ 766.678647][T24611] loop3: rw=2049, want=114, limit=112 03:35:50 executing program 1: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:50 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) 03:35:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:50 executing program 4: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:50 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:50 executing program 2: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) 03:35:50 executing program 1: mknod$loop(0x0, 0x2000, 0x1) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0x800, 0xffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x1000) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00'}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0xff, 0x3}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000004c0)) clock_getres(0x1, &(0x7f00000001c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x8001) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x833, r5, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x4b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7], 0x0, 0x0, 0x0}) sendfile(r0, r6, &(0x7f00000000c0)=0x202, 0xdd) [ 767.262988][ C0] net_ratelimit: 14 callbacks suppressed [ 767.263033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.275194][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 767.493244][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.499590][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 767.545560][T25135] attempt to access beyond end of device [ 767.562082][T25135] loop3: rw=2049, want=130, limit=112 03:35:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 767.732538][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.738456][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:51 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) [ 767.885891][T25621] FS-Cache: Duplicate cookie detected [ 767.891383][T25621] FS-Cache: O-cookie c=0000000060d904bb [p=00000000d716b094 fl=222 nc=0 na=1] [ 767.907733][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 767.915330][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 767.922817][T25621] FS-Cache: O-cookie d=000000000fed86d6 n=00000000e49564e3 [ 767.930404][T25621] FS-Cache: O-key=[10] '02000200000002000000' [ 767.937001][T25621] FS-Cache: N-cookie c=000000005d35febc [p=00000000d716b094 fl=2 nc=0 na=1] [ 767.946116][T25621] FS-Cache: N-cookie d=000000000fed86d6 n=000000007366a84f [ 767.953507][T25621] FS-Cache: N-key=[10] '02000200000002000000' [ 767.971178][T25673] FS-Cache: Duplicate cookie detected [ 767.978627][T25673] FS-Cache: O-cookie c=0000000060d904bb [p=00000000d716b094 fl=222 nc=0 na=1] [ 767.987743][T25673] FS-Cache: O-cookie d=000000000fed86d6 n=00000000e49564e3 [ 767.995158][T25673] FS-Cache: O-key=[10] '02000200000002000000' [ 768.001696][T25673] FS-Cache: N-cookie c=00000000aff0d781 [p=00000000d716b094 fl=2 nc=0 na=1] [ 768.010524][T25673] FS-Cache: N-cookie d=000000000fed86d6 n=00000000245cfab4 [ 768.018010][T25673] FS-Cache: N-key=[10] '02000200000002000000' [ 768.025235][T25655] FS-Cache: Duplicate cookie detected 03:35:51 executing program 1: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) [ 768.031446][T25655] FS-Cache: O-cookie c=0000000060d904bb [p=00000000d716b094 fl=222 nc=0 na=1] [ 768.041310][T25655] FS-Cache: O-cookie d=000000000fed86d6 n=00000000e49564e3 [ 768.048737][T25655] FS-Cache: O-key=[10] '02000200000002000000' [ 768.055373][T25655] FS-Cache: N-cookie c=00000000251ab7b4 [p=00000000d716b094 fl=2 nc=0 na=1] [ 768.064253][T25655] FS-Cache: N-cookie d=000000000fed86d6 n=000000005a0d5b50 [ 768.071614][T25655] FS-Cache: N-key=[10] '02000200000002000000' 03:35:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 768.596677][T25748] attempt to access beyond end of device [ 768.646151][T25748] loop3: rw=2049, want=130, limit=112 03:35:52 executing program 1: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) 03:35:52 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:52 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) 03:35:52 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkall\x86r\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) 03:35:52 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:52 executing program 1: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) [ 769.332502][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 769.338397][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 769.546720][T26610] attempt to access beyond end of device 03:35:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkall\x86r\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) [ 769.589437][T26610] loop3: rw=2049, want=130, limit=112 03:35:53 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) munmap(&(0x7f00001c0000/0x2000)=nil, 0x2000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r4 = dup2(r3, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r5 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x40000000}) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x34, 0x24, 0x9, 0x12, 0xb, 0x8, 0x5, 0x161}) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180), &(0x7f0000000200)=0xfffffffffffffd86) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0x4c, [], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/76}, &(0x7f00000005c0)=0x78) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r3, &(0x7f0000000240)="3440792164e3b31be80c2f5094ac7a2951b0244e746a053d411f9adb4f5c273e65367b9b89f4d34796661cd7635a857e1aaa3f1c174ff3528fe3a20ae6eb095aceb259f797959bc9aa878cb271b4edefc1419c87f1f0f35f93744d16846d8c213e3810da0c40f9187510433502e2ab5fa3d5bd9433c5f1662dfb871d25c64c7e30f38a3a96a5259ffd57830695a04dd2d5e7a9efb19633dcbb8a5fe6f699a5291a0f7ccdfa994246b67ae021523da1b545f61e5c67c7a8f2b0d48428", 0xbc, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) mq_notify(r3, &(0x7f00000003c0)={0x0, 0xe, 0x4, @tid=r6}) ioctl$int_out(r3, 0x0, &(0x7f00000006c0)) futex(&(0x7f0000000180), 0x8c, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x8000}, {r5}, {r3, 0x200}, {r5, 0x24d0}], 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3063}, 0x8) mq_timedsend(r4, &(0x7f0000000600)="b3eaddbd268653831f050c6c99ff5455741ae7e04e548641b4a0ebf55e4ba74455a2996adde572137b644c81ccf558ea483a0c6eda15c3cd626da99f9584aab452a23341537010ac342875b8088fb86ec187f7f2d6b31422428c44391f62aee87efdccb02a6df41c701e20117ea8db38174f9e130dc8190a1fe1fa2b6b479234f4fbe5bbee08622c7518f0ed8d499fcb0fd8", 0x92, 0x18000000000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x40, 0x0) fcntl$addseals(r3, 0x409, 0x9) creat(&(0x7f0000000240)='./file0\x00', 0xfffffffffbffffff) r7 = inotify_init() getitimer(0x1, &(0x7f0000000700)) inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x80000005) 03:35:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vsock\x00', 0x4000, 0x0) connect$netlink(r1, &(0x7f0000001780)=@kern={0x10, 0x0, 0x0, 0x80008}, 0xc) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(seed)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vsock\x00', 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000009c0)={@dev={0xfe, 0x80, [], 0x18}, 0x400000000081, r3}) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x13, &(0x7f00000004c0)=ANY=[@ANYRES16=r4], 0x0, 0xd0, 0xffffff02, 0x0, 0x41f00, 0x1}, 0xffffffffffffff51) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = getpgid(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x100000000000}, r8, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) close(r5) r9 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f00000002c0)=r10) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r11 = memfd_create(&(0x7f0000000800)='+\x8b\x8a\x16\x11O\xdd\xdfk(9\x88\xdf\x92\xd5\vL \xd0H\x9d\xd9\xbb\xfb\x0e|P\x15/#x\xb5\xee\xc6\xc1@\x83V3G\xe4@r\xfd\x8e\xea\xd8c\xc7\xf1v@\xbc\xb2\r\xdd_\xc6{\xf101m\x17\xa3\xc8\xc5Yh9\x7f\x02r\x90\x03&\xfd\xacV\x95?\t-\xcfGh[\xf2A\x98V^\xd6s\xb7(4%\r\xe51.\xbe\xabv\xe3', 0x2000000) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[], 0x0) close(r7) r12 = dup3(r2, r11, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) 03:35:53 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) 03:35:53 executing program 3: socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x80000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = fanotify_init(0x1000002, 0x0) fsetxattr$security_selinux(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0xb21, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) socket$inet6(0xa, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x204000, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@null=' \x00', 0xe, 'ifb0\x00'}) fchdir(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x143) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x8080fffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0)=0x100000001, 0x4) 03:35:53 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkall\x86r\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) [ 769.963109][T27050] FS-Cache: Duplicate cookie detected [ 769.968751][T27050] FS-Cache: O-cookie c=00000000a77f3af6 [p=00000000d716b094 fl=222 nc=0 na=1] [ 769.978105][T27050] FS-Cache: O-cookie d=000000000fed86d6 n=0000000067a9613c [ 769.985650][T27050] FS-Cache: O-key=[10] '02000200000002000000' [ 769.992305][T27050] FS-Cache: N-cookie c=0000000082f19a5c [p=00000000d716b094 fl=2 nc=0 na=1] [ 770.001522][T27050] FS-Cache: N-cookie d=000000000fed86d6 n=00000000bea65300 [ 770.009009][T27050] FS-Cache: N-key=[10] '02000200000002000000' 03:35:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) 03:35:53 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398456f1a}) sigaltstack(&(0x7f0000000000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x2000)=nil, &(0x7f0000000140)) 03:35:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000100000010c972e1611846bf1069fa9a98ab72e630fd085e08275586212f8da1e0aeb9e7d145aa8069b47e2ea72a82f2bcf6f9b9f05a363d220d1678292d22326ac559faa49936899f44773a7074bdf9ad0e055fcf90e45bcea9e48ce96f0fa6ff089e111c0b0a58442c83e35d0e78e4c7aab3d23df723bd6e2847f8e85506fd91e99738"], 0x1}}, 0x0) [ 770.384453][T27099] attempt to access beyond end of device [ 770.400779][T27099] loop3: rw=2049, want=130, limit=112 03:35:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) munmap(&(0x7f00001c0000/0x2000)=nil, 0x2000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r4 = dup2(r3, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r5 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x40000000}) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x34, 0x24, 0x9, 0x12, 0xb, 0x8, 0x5, 0x161}) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180), &(0x7f0000000200)=0xfffffffffffffd86) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0x4c, [], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/76}, &(0x7f00000005c0)=0x78) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r3, &(0x7f0000000240)="3440792164e3b31be80c2f5094ac7a2951b0244e746a053d411f9adb4f5c273e65367b9b89f4d34796661cd7635a857e1aaa3f1c174ff3528fe3a20ae6eb095aceb259f797959bc9aa878cb271b4edefc1419c87f1f0f35f93744d16846d8c213e3810da0c40f9187510433502e2ab5fa3d5bd9433c5f1662dfb871d25c64c7e30f38a3a96a5259ffd57830695a04dd2d5e7a9efb19633dcbb8a5fe6f699a5291a0f7ccdfa994246b67ae021523da1b545f61e5c67c7a8f2b0d48428", 0xbc, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) mq_notify(r3, &(0x7f00000003c0)={0x0, 0xe, 0x4, @tid=r6}) ioctl$int_out(r3, 0x0, &(0x7f00000006c0)) futex(&(0x7f0000000180), 0x8c, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x8000}, {r5}, {r3, 0x200}, {r5, 0x24d0}], 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3063}, 0x8) mq_timedsend(r4, &(0x7f0000000600)="b3eaddbd268653831f050c6c99ff5455741ae7e04e548641b4a0ebf55e4ba74455a2996adde572137b644c81ccf558ea483a0c6eda15c3cd626da99f9584aab452a23341537010ac342875b8088fb86ec187f7f2d6b31422428c44391f62aee87efdccb02a6df41c701e20117ea8db38174f9e130dc8190a1fe1fa2b6b479234f4fbe5bbee08622c7518f0ed8d499fcb0fd8", 0x92, 0x18000000000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x40, 0x0) fcntl$addseals(r3, 0x409, 0x9) creat(&(0x7f0000000240)='./file0\x00', 0xfffffffffbffffff) r7 = inotify_init() getitimer(0x1, &(0x7f0000000700)) inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x80000005) 03:35:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) 03:35:54 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398456f1a}) sigaltstack(&(0x7f0000000000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x2000)=nil, &(0x7f0000000140)) 03:35:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) munmap(&(0x7f00001c0000/0x2000)=nil, 0x2000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r4 = dup2(r3, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r5 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x40000000}) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x34, 0x24, 0x9, 0x12, 0xb, 0x8, 0x5, 0x161}) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180), &(0x7f0000000200)=0xfffffffffffffd86) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0x4c, [], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/76}, &(0x7f00000005c0)=0x78) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r3, &(0x7f0000000240)="3440792164e3b31be80c2f5094ac7a2951b0244e746a053d411f9adb4f5c273e65367b9b89f4d34796661cd7635a857e1aaa3f1c174ff3528fe3a20ae6eb095aceb259f797959bc9aa878cb271b4edefc1419c87f1f0f35f93744d16846d8c213e3810da0c40f9187510433502e2ab5fa3d5bd9433c5f1662dfb871d25c64c7e30f38a3a96a5259ffd57830695a04dd2d5e7a9efb19633dcbb8a5fe6f699a5291a0f7ccdfa994246b67ae021523da1b545f61e5c67c7a8f2b0d48428", 0xbc, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) mq_notify(r3, &(0x7f00000003c0)={0x0, 0xe, 0x4, @tid=r6}) ioctl$int_out(r3, 0x0, &(0x7f00000006c0)) futex(&(0x7f0000000180), 0x8c, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x8000}, {r5}, {r3, 0x200}, {r5, 0x24d0}], 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3063}, 0x8) mq_timedsend(r4, &(0x7f0000000600)="b3eaddbd268653831f050c6c99ff5455741ae7e04e548641b4a0ebf55e4ba74455a2996adde572137b644c81ccf558ea483a0c6eda15c3cd626da99f9584aab452a23341537010ac342875b8088fb86ec187f7f2d6b31422428c44391f62aee87efdccb02a6df41c701e20117ea8db38174f9e130dc8190a1fe1fa2b6b479234f4fbe5bbee08622c7518f0ed8d499fcb0fd8", 0x92, 0x18000000000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x40, 0x0) fcntl$addseals(r3, 0x409, 0x9) creat(&(0x7f0000000240)='./file0\x00', 0xfffffffffbffffff) r7 = inotify_init() getitimer(0x1, &(0x7f0000000700)) inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x80000005) 03:35:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) 03:35:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000100000010c972e1611846bf1069fa9a98ab72e630fd085e08275586212f8da1e0aeb9e7d145aa8069b47e2ea72a82f2bcf6f9b9f05a363d220d1678292d22326ac559faa49936899f44773a7074bdf9ad0e055fcf90e45bcea9e48ce96f0fa6ff089e111c0b0a58442c83e35d0e78e4c7aab3d23df723bd6e2847f8e85506fd91e99738"], 0x1}}, 0x0) 03:35:54 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398456f1a}) sigaltstack(&(0x7f0000000000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x2000)=nil, &(0x7f0000000140)) 03:35:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000100000010c972e1611846bf1069fa9a98ab72e630fd085e08275586212f8da1e0aeb9e7d145aa8069b47e2ea72a82f2bcf6f9b9f05a363d220d1678292d22326ac559faa49936899f44773a7074bdf9ad0e055fcf90e45bcea9e48ce96f0fa6ff089e111c0b0a58442c83e35d0e78e4c7aab3d23df723bd6e2847f8e85506fd91e99738"], 0x1}}, 0x0) 03:35:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000100000010c972e1611846bf1069fa9a98ab72e630fd085e08275586212f8da1e0aeb9e7d145aa8069b47e2ea72a82f2bcf6f9b9f05a363d220d1678292d22326ac559faa49936899f44773a7074bdf9ad0e055fcf90e45bcea9e48ce96f0fa6ff089e111c0b0a58442c83e35d0e78e4c7aab3d23df723bd6e2847f8e85506fd91e99738"], 0x1}}, 0x0) 03:35:54 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) 03:35:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) munmap(&(0x7f00001c0000/0x2000)=nil, 0x2000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r4 = dup2(r3, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) r5 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x40000000}) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x34, 0x24, 0x9, 0x12, 0xb, 0x8, 0x5, 0x161}) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180), &(0x7f0000000200)=0xfffffffffffffd86) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x4, 0x4c, [], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/76}, &(0x7f00000005c0)=0x78) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r3, &(0x7f0000000240)="3440792164e3b31be80c2f5094ac7a2951b0244e746a053d411f9adb4f5c273e65367b9b89f4d34796661cd7635a857e1aaa3f1c174ff3528fe3a20ae6eb095aceb259f797959bc9aa878cb271b4edefc1419c87f1f0f35f93744d16846d8c213e3810da0c40f9187510433502e2ab5fa3d5bd9433c5f1662dfb871d25c64c7e30f38a3a96a5259ffd57830695a04dd2d5e7a9efb19633dcbb8a5fe6f699a5291a0f7ccdfa994246b67ae021523da1b545f61e5c67c7a8f2b0d48428", 0xbc, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) mq_notify(r3, &(0x7f00000003c0)={0x0, 0xe, 0x4, @tid=r6}) ioctl$int_out(r3, 0x0, &(0x7f00000006c0)) futex(&(0x7f0000000180), 0x8c, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x8000}, {r5}, {r3, 0x200}, {r5, 0x24d0}], 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3063}, 0x8) mq_timedsend(r4, &(0x7f0000000600)="b3eaddbd268653831f050c6c99ff5455741ae7e04e548641b4a0ebf55e4ba74455a2996adde572137b644c81ccf558ea483a0c6eda15c3cd626da99f9584aab452a23341537010ac342875b8088fb86ec187f7f2d6b31422428c44391f62aee87efdccb02a6df41c701e20117ea8db38174f9e130dc8190a1fe1fa2b6b479234f4fbe5bbee08622c7518f0ed8d499fcb0fd8", 0x92, 0x18000000000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x40, 0x0) fcntl$addseals(r3, 0x409, 0x9) creat(&(0x7f0000000240)='./file0\x00', 0xfffffffffbffffff) r7 = inotify_init() getitimer(0x1, &(0x7f0000000700)) inotify_add_watch(r7, &(0x7f0000000200)='./file0\x00', 0x80000005) 03:35:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000100000010c972e1611846bf1069fa9a98ab72e630fd085e08275586212f8da1e0aeb9e7d145aa8069b47e2ea72a82f2bcf6f9b9f05a363d220d1678292d22326ac559faa49936899f44773a7074bdf9ad0e055fcf90e45bcea9e48ce96f0fa6ff089e111c0b0a58442c83e35d0e78e4c7aab3d23df723bd6e2847f8e85506fd91e99738"], 0x1}}, 0x0) 03:35:54 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398456f1a}) sigaltstack(&(0x7f0000000000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x2000)=nil, &(0x7f0000000140)) 03:35:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000100000010c972e1611846bf1069fa9a98ab72e630fd085e08275586212f8da1e0aeb9e7d145aa8069b47e2ea72a82f2bcf6f9b9f05a363d220d1678292d22326ac559faa49936899f44773a7074bdf9ad0e055fcf90e45bcea9e48ce96f0fa6ff089e111c0b0a58442c83e35d0e78e4c7aab3d23df723bd6e2847f8e85506fd91e99738"], 0x1}}, 0x0) 03:35:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000100000010c972e1611846bf1069fa9a98ab72e630fd085e08275586212f8da1e0aeb9e7d145aa8069b47e2ea72a82f2bcf6f9b9f05a363d220d1678292d22326ac559faa49936899f44773a7074bdf9ad0e055fcf90e45bcea9e48ce96f0fa6ff089e111c0b0a58442c83e35d0e78e4c7aab3d23df723bd6e2847f8e85506fd91e99738"], 0x1}}, 0x0) 03:35:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x42a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8800) sendmsg$TEAM_CMD_OPTIONS_SET(r1,