442200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 886.452046] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 886.458063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 886.476719] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 886.495248] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 886.506762] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 886.513557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 886.520756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 886.531621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.539576] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 886.556358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 886.563176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 886.573184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.728386] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 886.755798] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 886.763641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 886.776648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 886.787142] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 886.810817] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 886.818490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 886.829178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 886.882222] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 886.889550] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 886.896314] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 886.906875] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 886.914581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 886.922646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 886.936217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 886.943335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 886.955521] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 886.962866] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 886.969374] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 886.975840] device veth0_vlan entered promiscuous mode [ 886.988209] device veth1_vlan entered promiscuous mode [ 886.998748] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 887.008351] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 887.015760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 887.023366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 887.031013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 887.040541] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 887.052737] device veth0_vlan entered promiscuous mode [ 887.058551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 887.067035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 887.074117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 887.089192] device veth1_vlan entered promiscuous mode [ 887.096717] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 887.106492] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 887.750813] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 887.758081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 888.310197] protocol 88fb is buggy, dev hsr_slave_0 [ 888.315357] protocol 88fb is buggy, dev hsr_slave_1 17:47:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:22 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 888.870359] protocol 88fb is buggy, dev hsr_slave_0 [ 888.875575] protocol 88fb is buggy, dev hsr_slave_1 [ 888.950313] protocol 88fb is buggy, dev hsr_slave_0 [ 888.955438] protocol 88fb is buggy, dev hsr_slave_1 [ 888.960583] protocol 88fb is buggy, dev hsr_slave_0 [ 888.965659] protocol 88fb is buggy, dev hsr_slave_1 17:47:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:23 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a2", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:23 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 890.423172] device bridge_slave_1 left promiscuous mode [ 890.434901] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.527021] device bridge_slave_0 left promiscuous mode [ 890.553046] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.626591] device veth1_vlan left promiscuous mode [ 890.667162] device veth0_vlan left promiscuous mode [ 891.014177] device hsr_slave_1 left promiscuous mode [ 891.054033] device hsr_slave_0 left promiscuous mode [ 891.107087] team0 (unregistering): Port device team_slave_1 removed [ 891.141133] team0 (unregistering): Port device team_slave_0 removed [ 891.152199] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 891.194226] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 891.292909] bond0 (unregistering): Released all slaves [ 893.311426] IPVS: ftp: loaded support on port[0] = 21 [ 894.094490] IPVS: ftp: loaded support on port[0] = 21 [ 894.115730] chnl_net:caif_netlink_parms(): no params data found [ 894.185312] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.192300] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.199223] device bridge_slave_0 entered promiscuous mode [ 894.206655] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.213147] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.220787] device bridge_slave_1 entered promiscuous mode [ 894.272170] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 894.285340] chnl_net:caif_netlink_parms(): no params data found [ 894.295344] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 894.322525] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 894.330785] team0: Port device team_slave_0 added [ 894.343555] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 894.350811] team0: Port device team_slave_1 added [ 894.363691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 894.371879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 894.406169] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.412668] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.419620] device bridge_slave_0 entered promiscuous mode [ 894.462388] device hsr_slave_0 entered promiscuous mode [ 894.500387] device hsr_slave_1 entered promiscuous mode [ 894.540385] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.546772] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.554452] device bridge_slave_1 entered promiscuous mode [ 894.569603] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 894.584840] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 894.592792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 894.604089] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 894.631134] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 894.638411] team0: Port device team_slave_0 added [ 894.644861] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 894.652164] team0: Port device team_slave_1 added [ 894.665312] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 894.673172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 894.752513] device hsr_slave_0 entered promiscuous mode [ 894.790495] device hsr_slave_1 entered promiscuous mode [ 894.837857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 894.845493] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 894.906171] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.912589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.919182] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.925609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.951611] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.957990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.964640] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.970999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.017937] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 895.024187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.034425] device bridge_slave_1 left promiscuous mode [ 895.039899] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.090736] device bridge_slave_0 left promiscuous mode [ 895.096271] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.151942] device veth1_vlan left promiscuous mode [ 895.157045] device veth0_vlan left promiscuous mode [ 895.273972] device hsr_slave_1 left promiscuous mode [ 895.302863] device hsr_slave_0 left promiscuous mode [ 895.343015] team0 (unregistering): Port device team_slave_1 removed [ 895.353606] team0 (unregistering): Port device team_slave_0 removed [ 895.362541] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 895.395428] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 895.480183] bond0 (unregistering): Released all slaves [ 895.525584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 895.534975] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.541929] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.548770] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 895.556650] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.563398] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.575132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 895.583417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 895.590551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 895.599435] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 895.605820] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.615482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 895.624986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.634757] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 895.641337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 895.649109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.656868] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.663257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.674184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 895.684042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 895.692247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 895.699796] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.706190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.715649] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 895.723356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 895.730513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 895.737398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 895.745161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 895.755736] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 895.761912] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.769967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 895.779178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 895.789642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 895.833498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 895.843079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 895.860577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.868247] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.874639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.886399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 895.894256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 895.908753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 895.919267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 895.932927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 895.940472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 895.947443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 895.960529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 895.968172] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.974564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.987043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 895.995235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 896.007781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 896.018441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 896.029122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 896.037223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 896.049974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 896.057630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 896.072860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 896.082729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 896.095228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 896.103664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 896.116515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 896.126128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 896.139927] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 896.146190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 896.162053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 896.171613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 896.178677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 896.187375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 896.202406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 896.211886] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 896.219644] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 896.226972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 896.235142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 896.243320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.250009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.259051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 896.271780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.278294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 896.286966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 896.297097] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 896.305224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 896.331436] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 896.339941] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 896.351367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.358113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.372048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.519823] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 896.537631] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 896.547699] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 896.562721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 896.581038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 896.602806] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 896.610774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 896.618640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 896.681336] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 896.688593] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 896.698776] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 896.709630] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 896.717821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 896.726262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 896.736826] device veth0_vlan entered promiscuous mode [ 896.743883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 896.752339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 896.764332] device veth1_vlan entered promiscuous mode [ 896.770749] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 896.779815] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 896.788020] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 896.795471] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 896.802678] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 896.823397] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 896.830250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 896.838613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 896.846225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 896.854345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 896.868765] device veth0_vlan entered promiscuous mode [ 896.880845] device veth1_vlan entered promiscuous mode [ 896.886856] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 896.893913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 896.901615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 896.917723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 896.927720] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 897.270395] protocol 88fb is buggy, dev hsr_slave_0 [ 897.275493] protocol 88fb is buggy, dev hsr_slave_1 [ 897.590198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 897.600443] protocol 88fb is buggy, dev hsr_slave_0 [ 897.605577] protocol 88fb is buggy, dev hsr_slave_1 [ 898.630163] protocol 88fb is buggy, dev hsr_slave_0 [ 898.635309] protocol 88fb is buggy, dev hsr_slave_1 [ 898.642040] device bridge_slave_1 left promiscuous mode [ 898.647568] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.691016] device bridge_slave_0 left promiscuous mode [ 898.696520] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.720453] protocol 88fb is buggy, dev hsr_slave_0 [ 898.725580] protocol 88fb is buggy, dev hsr_slave_1 [ 898.743888] device veth1_vlan left promiscuous mode [ 898.748971] device veth0_vlan left promiscuous mode 17:47:32 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 898.833005] device hsr_slave_1 left promiscuous mode [ 898.884409] device hsr_slave_0 left promiscuous mode [ 898.955254] team0 (unregistering): Port device team_slave_1 removed 17:47:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 899.195461] team0 (unregistering): Port device team_slave_0 removed [ 899.247748] bond0 (unregistering): Releasing backup interface bond_slave_1 17:47:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 899.485026] bond0 (unregistering): Releasing backup interface bond_slave_0 17:47:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="0010000000000000050000000000000017010000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 899.876926] bond0 (unregistering): Released all slaves 17:47:33 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="0010000000000000050000000000000017010000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/21, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 902.411541] IPVS: ftp: loaded support on port[0] = 21 [ 903.234153] chnl_net:caif_netlink_parms(): no params data found [ 903.279362] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.285981] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.293535] device bridge_slave_0 entered promiscuous mode [ 903.305717] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.312219] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.319146] device bridge_slave_1 entered promiscuous mode [ 903.336995] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 903.348708] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 903.365206] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 903.372569] team0: Port device team_slave_0 added [ 903.378184] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 903.386410] team0: Port device team_slave_1 added [ 903.392693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 903.403281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 903.462369] device hsr_slave_0 entered promiscuous mode [ 903.500374] device hsr_slave_1 entered promiscuous mode [ 903.543485] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 903.550971] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 903.600941] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.607308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.613991] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.620398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.656774] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 903.663275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.673872] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 903.687433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 903.694675] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.701850] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.712376] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 903.721353] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.732750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 903.740809] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.747148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.773843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 903.782421] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.788827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.796001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 903.803939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 903.811990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.819378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.827451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 903.835533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 903.841762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 903.854502] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 903.862608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.869284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.879560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.887365] device bridge_slave_1 left promiscuous mode [ 903.892959] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.911102] device bridge_slave_0 left promiscuous mode [ 903.916578] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.972965] device veth1_vlan left promiscuous mode [ 903.978053] device veth0_vlan left promiscuous mode [ 904.064631] device hsr_slave_1 left promiscuous mode [ 904.125106] device hsr_slave_0 left promiscuous mode [ 904.174005] team0 (unregistering): Port device team_slave_1 removed [ 904.184975] team0 (unregistering): Port device team_slave_0 removed [ 904.194291] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 904.233724] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 904.309770] bond0 (unregistering): Released all slaves [ 904.356734] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 904.415177] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 904.424910] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 904.433609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 904.442270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 904.475022] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 904.483716] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 904.491390] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 904.501276] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 904.507860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 904.515534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 904.523569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 904.530714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 904.585018] device veth0_vlan entered promiscuous mode [ 904.596609] device veth1_vlan entered promiscuous mode [ 904.606409] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 904.616510] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 905.430381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 905.437642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 905.910128] protocol 88fb is buggy, dev hsr_slave_0 [ 905.915246] protocol 88fb is buggy, dev hsr_slave_1 [ 906.230141] protocol 88fb is buggy, dev hsr_slave_0 [ 906.235256] protocol 88fb is buggy, dev hsr_slave_1 [ 906.310155] protocol 88fb is buggy, dev hsr_slave_0 [ 906.315257] protocol 88fb is buggy, dev hsr_slave_1 17:47:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/21, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="0010000000000000050000000000000017010000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:40 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c355", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/21, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/25, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/25, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 908.052398] device bridge_slave_1 left promiscuous mode [ 908.060710] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.121272] device bridge_slave_0 left promiscuous mode [ 908.126937] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.203175] device veth1_vlan left promiscuous mode [ 908.213332] device veth0_vlan left promiscuous mode [ 908.403669] device hsr_slave_1 left promiscuous mode [ 908.444860] device hsr_slave_0 left promiscuous mode [ 908.484168] team0 (unregistering): Port device team_slave_1 removed [ 908.506904] team0 (unregistering): Port device team_slave_0 removed [ 908.534715] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 908.565158] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 908.663319] bond0 (unregistering): Released all slaves [ 910.740965] IPVS: ftp: loaded support on port[0] = 21 [ 911.561893] IPVS: ftp: loaded support on port[0] = 21 [ 911.575677] chnl_net:caif_netlink_parms(): no params data found [ 911.613897] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.620353] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.627257] device bridge_slave_0 entered promiscuous mode [ 911.634359] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.640912] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.648330] device bridge_slave_1 entered promiscuous mode [ 911.674285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 911.687933] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 911.714290] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 911.721698] team0: Port device team_slave_0 added [ 911.729175] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 911.736407] team0: Port device team_slave_1 added [ 911.743964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 911.751909] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 911.813717] device hsr_slave_0 entered promiscuous mode [ 911.850370] device hsr_slave_1 entered promiscuous mode [ 911.890939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 911.898230] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 911.986881] chnl_net:caif_netlink_parms(): no params data found [ 912.029238] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.035645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.042399] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.048736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.073290] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.079731] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.087512] device bridge_slave_0 entered promiscuous mode [ 912.096952] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.103417] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.112911] device bridge_slave_1 entered promiscuous mode [ 912.131719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 912.141260] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 912.163094] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 912.170597] team0: Port device team_slave_0 added [ 912.176494] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 912.183838] team0: Port device team_slave_1 added [ 912.189826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 912.198128] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 912.253790] device hsr_slave_0 entered promiscuous mode [ 912.292626] device hsr_slave_1 entered promiscuous mode [ 912.331389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 912.338862] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 912.391640] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 912.397734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.407269] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 912.423649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.430792] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.437370] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.448145] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 912.454429] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.467001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.474807] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.481265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.496291] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 912.504184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.512274] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.518608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.530246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.545431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 912.555662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 912.566166] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 912.572730] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 912.581097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 912.588017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 912.595983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 912.603876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 912.611826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 912.629891] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 912.638212] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 912.645670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.652756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.668757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.697382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.707671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 912.717679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 912.724259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.732760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.743075] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 912.749170] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.758732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 912.766861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.775335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.783241] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.789599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.796903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.805888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 912.816419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 912.826744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.835163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.845405] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.851789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.858705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 912.869214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 912.877115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 912.887324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 912.897705] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 912.905735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 912.915908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.923746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 912.935176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 912.942959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 912.951354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 912.962342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 912.973189] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 912.981164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 912.989329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 912.997310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 913.005200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 913.015250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 913.023401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.041681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.051392] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 913.057469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.073098] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 913.081020] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 913.087593] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 913.098213] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 913.106187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 913.114075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 913.122753] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 913.128979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 913.136100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 913.144347] device veth0_vlan entered promiscuous mode [ 913.154058] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 913.160759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.167416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.177538] device veth1_vlan entered promiscuous mode [ 913.183710] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 913.194447] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 913.205868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.275478] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 913.286729] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 913.293878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 913.302294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 913.310221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 913.318194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 913.351462] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 913.358569] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 913.366112] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 913.376047] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 913.383852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 913.391789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 913.399890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 913.407077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 913.416377] device veth0_vlan entered promiscuous mode [ 913.427467] device veth1_vlan entered promiscuous mode [ 913.433973] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 913.444298] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 913.580341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 913.587717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 913.910188] protocol 88fb is buggy, dev hsr_slave_0 [ 913.915341] protocol 88fb is buggy, dev hsr_slave_1 [ 914.230168] protocol 88fb is buggy, dev hsr_slave_0 [ 914.235295] protocol 88fb is buggy, dev hsr_slave_1 17:47:48 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 915.110493] protocol 88fb is buggy, dev hsr_slave_0 [ 915.115637] protocol 88fb is buggy, dev hsr_slave_1 [ 915.282228] device bridge_slave_1 left promiscuous mode [ 915.287775] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.330728] device bridge_slave_0 left promiscuous mode [ 915.336259] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.350113] protocol 88fb is buggy, dev hsr_slave_0 [ 915.355255] protocol 88fb is buggy, dev hsr_slave_1 [ 915.384184] device veth1_vlan left promiscuous mode [ 915.389260] device veth0_vlan left promiscuous mode [ 915.482885] device hsr_slave_1 left promiscuous mode 17:47:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/25, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:49 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 915.520278] protocol 88fb is buggy, dev hsr_slave_0 [ 915.525358] protocol 88fb is buggy, dev hsr_slave_1 [ 915.537998] device hsr_slave_0 left promiscuous mode 17:47:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c355", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 915.571931] team0 (unregistering): Port device team_slave_1 removed [ 915.592169] team0 (unregistering): Port device team_slave_0 removed [ 915.608367] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 915.655546] bond0 (unregistering): Releasing backup interface bond_slave_0 17:47:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/27, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 916.024003] bond0 (unregistering): Released all slaves 17:47:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c355", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/27, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/27, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 919.351534] IPVS: ftp: loaded support on port[0] = 21 [ 920.153895] chnl_net:caif_netlink_parms(): no params data found [ 920.198116] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.204664] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.211905] device bridge_slave_0 entered promiscuous mode [ 920.218883] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.225401] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.232745] device bridge_slave_1 entered promiscuous mode [ 920.255800] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 920.265969] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 920.287082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 920.294303] team0: Port device team_slave_0 added [ 920.299868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 920.309002] team0: Port device team_slave_1 added [ 920.314496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 920.322234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 920.384113] device hsr_slave_0 entered promiscuous mode [ 920.420524] device hsr_slave_1 entered promiscuous mode [ 920.473514] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 920.481095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 920.529358] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.535775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.542437] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.548780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.611961] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 920.618097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.628014] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 920.637483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 920.644636] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.651459] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.665105] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 920.671251] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.679842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.687945] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.694322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.706863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 920.714642] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.721027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.738098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 920.746020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 920.759957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 920.770646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.781044] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 920.791297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 920.798792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 920.806377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 920.814086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 920.827158] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 920.835231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 920.842053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 920.853914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.881523] device bridge_slave_1 left promiscuous mode [ 920.887245] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.931276] device bridge_slave_0 left promiscuous mode [ 920.936763] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.993130] device veth1_vlan left promiscuous mode [ 920.998259] device veth0_vlan left promiscuous mode [ 921.104635] device hsr_slave_1 left promiscuous mode [ 921.143063] device hsr_slave_0 left promiscuous mode [ 921.194490] team0 (unregistering): Port device team_slave_1 removed [ 921.204139] team0 (unregistering): Port device team_slave_0 removed [ 921.214408] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 921.254226] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 921.309594] bond0 (unregistering): Released all slaves [ 921.355976] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 921.396100] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 921.405532] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 921.412994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 921.421518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 921.507310] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 921.514937] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 921.522306] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 921.533574] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 921.540222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 921.547631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 921.558213] device veth0_vlan entered promiscuous mode [ 921.571101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 921.578082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 921.586782] device veth1_vlan entered promiscuous mode [ 921.592942] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 921.605292] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 922.391120] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 922.398338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 922.870335] protocol 88fb is buggy, dev hsr_slave_0 [ 922.875585] protocol 88fb is buggy, dev hsr_slave_1 [ 922.970953] IPVS: ftp: loaded support on port[0] = 21 [ 923.280292] protocol 88fb is buggy, dev hsr_slave_0 [ 923.285423] protocol 88fb is buggy, dev hsr_slave_1 17:47:57 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:57 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:47:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:47:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 924.251284] chnl_net:caif_netlink_parms(): no params data found [ 924.299109] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.305710] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.313272] device bridge_slave_0 entered promiscuous mode [ 924.324697] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.331147] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.338155] device bridge_slave_1 entered promiscuous mode [ 924.354026] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 924.367073] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 924.386922] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 924.394220] team0: Port device team_slave_0 added [ 924.399924] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 924.408060] team0: Port device team_slave_1 added [ 924.416511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 924.424333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 924.482410] device hsr_slave_0 entered promiscuous mode [ 924.530476] device hsr_slave_1 entered promiscuous mode [ 924.575116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 924.582312] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 924.632720] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.639276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.645978] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.652382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.689630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.698601] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 924.708372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 924.715762] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.723125] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.737450] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 924.743852] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.753650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 924.761234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 924.769018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 924.776832] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.783337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.796612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 924.803963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 924.812507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 924.820941] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.827292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.836890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 924.844096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 924.853940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 924.861784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 924.870768] device bridge_slave_1 left promiscuous mode [ 924.876235] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.911787] device bridge_slave_0 left promiscuous mode [ 924.917269] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.963142] device veth1_vlan left promiscuous mode [ 924.968236] device veth0_vlan left promiscuous mode [ 925.061877] device hsr_slave_1 left promiscuous mode [ 925.114271] device hsr_slave_0 left promiscuous mode [ 925.154516] team0 (unregistering): Port device team_slave_1 removed [ 925.163861] team0 (unregistering): Port device team_slave_0 removed [ 925.172996] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 925.213130] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 925.300948] bond0 (unregistering): Released all slaves [ 925.345690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 925.353576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 925.361873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 925.372465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 925.381074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 925.388541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 925.398450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 925.408656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 925.415858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 925.423884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 925.433760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 925.442133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 925.449657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.459740] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 925.466512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 925.482661] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 925.489934] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 925.496550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 925.503576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 925.515842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.650576] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 925.666255] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 925.674261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 925.687034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 925.754189] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 925.766019] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 925.773266] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 925.788186] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 925.794881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 925.807398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 925.815536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 925.826444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 925.835762] device veth0_vlan entered promiscuous mode [ 925.853323] device veth1_vlan entered promiscuous mode [ 925.859396] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 925.875159] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 926.800241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 926.807444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 17:48:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:01 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 929.302478] device bridge_slave_1 left promiscuous mode [ 929.309203] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.371265] device bridge_slave_0 left promiscuous mode [ 929.378005] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.434265] device veth1_vlan left promiscuous mode [ 929.443605] device veth0_vlan left promiscuous mode [ 929.605827] device hsr_slave_1 left promiscuous mode [ 929.666924] device hsr_slave_0 left promiscuous mode [ 929.723912] team0 (unregistering): Port device team_slave_1 removed [ 929.754212] team0 (unregistering): Port device team_slave_0 removed [ 929.765039] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 929.824022] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 929.938983] bond0 (unregistering): Released all slaves [ 931.791549] IPVS: ftp: loaded support on port[0] = 21 [ 932.542581] IPVS: ftp: loaded support on port[0] = 21 [ 932.602647] chnl_net:caif_netlink_parms(): no params data found [ 932.659307] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.665867] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.673352] device bridge_slave_0 entered promiscuous mode [ 932.683102] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.689502] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.696626] device bridge_slave_1 entered promiscuous mode [ 932.744159] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 932.753916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 932.768835] chnl_net:caif_netlink_parms(): no params data found [ 932.787057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 932.794538] team0: Port device team_slave_0 added [ 932.805890] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 932.813053] team0: Port device team_slave_1 added [ 932.818661] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 932.831487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 932.882408] device hsr_slave_0 entered promiscuous mode [ 932.920460] device hsr_slave_1 entered promiscuous mode [ 932.965414] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 932.972300] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.978696] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.987949] device bridge_slave_0 entered promiscuous mode [ 932.994735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 933.002012] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.008391] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.015933] device bridge_slave_1 entered promiscuous mode [ 933.040000] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 933.056136] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 933.084789] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 933.092240] team0: Port device team_slave_0 added [ 933.100430] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 933.107782] team0: Port device team_slave_1 added [ 933.114250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 933.124393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 933.183946] device hsr_slave_0 entered promiscuous mode [ 933.230400] device hsr_slave_1 entered promiscuous mode [ 933.286799] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 933.294283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 933.311003] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.317390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.324191] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.330597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.383675] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.390118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.396715] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.403107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.439047] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 933.445485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.455724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 933.466612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 933.473732] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.480865] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.488184] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.495069] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.504711] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 933.511311] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.523826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 933.531664] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.538015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.549386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.559250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 933.567283] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.573683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.581989] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 933.590938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 933.598613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 933.607637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 933.617993] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 933.626384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 933.633637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 933.642284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 933.652236] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 933.658325] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.668100] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 933.676194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 933.684629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 933.692502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 933.700204] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.706564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.715181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 933.722976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 933.731046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 933.743367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 933.750692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 933.757683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 933.766052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 933.773850] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.780245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.789344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 933.797503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 933.805252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 933.815373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 933.826789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 933.833991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 933.841854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 933.849274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 933.858505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 933.868983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 933.876325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 933.884684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 933.892415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 933.902704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 933.910775] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 933.916837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 933.924465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 933.932208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 933.940410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 933.949743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 933.961377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 933.968432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 933.976324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 933.984383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 933.992407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 934.003762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 934.012810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 934.023396] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 934.029435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 934.037133] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 934.043728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 934.051931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 934.063299] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 934.071895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 934.078607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 934.089198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.101121] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 934.109348] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 934.116128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 934.123585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 934.136208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.226777] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 934.237656] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 934.249112] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 934.262185] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 934.269329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 934.278283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 934.291619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 934.299356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 934.343925] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 934.352551] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 934.359246] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 934.369586] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 934.376825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 934.384536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 934.392953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 934.399940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 934.408019] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 934.415606] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 934.422401] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 934.432812] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 934.441591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 934.449002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 934.456789] device veth0_vlan entered promiscuous mode [ 934.461737] device veth1_vlan entered promiscuous mode [ 934.467947] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 934.475997] device veth0_vlan entered promiscuous mode [ 934.482370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 934.489503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 934.496720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 934.507618] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 934.519924] device veth1_vlan entered promiscuous mode [ 934.526066] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 934.537337] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 934.590715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 934.597907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 934.605198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 936.150455] protocol 88fb is buggy, dev hsr_slave_0 [ 936.155573] protocol 88fb is buggy, dev hsr_slave_1 [ 936.390336] protocol 88fb is buggy, dev hsr_slave_0 [ 936.395433] protocol 88fb is buggy, dev hsr_slave_1 17:48:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:10 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:10 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:10 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d260000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d260000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 937.981644] device bridge_slave_1 left promiscuous mode [ 937.987205] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.071145] device bridge_slave_0 left promiscuous mode [ 938.076806] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.223530] device veth1_vlan left promiscuous mode [ 938.248307] device veth0_vlan left promiscuous mode [ 938.492776] device hsr_slave_1 left promiscuous mode [ 938.533818] device hsr_slave_0 left promiscuous mode [ 938.574258] team0 (unregistering): Port device team_slave_1 removed [ 938.606214] team0 (unregistering): Port device team_slave_0 removed [ 938.640457] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 938.684736] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 938.810839] bond0 (unregistering): Released all slaves [ 940.841543] IPVS: ftp: loaded support on port[0] = 21 [ 941.654268] chnl_net:caif_netlink_parms(): no params data found [ 941.699623] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.706167] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.713324] device bridge_slave_0 entered promiscuous mode [ 941.720748] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.727142] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.734255] device bridge_slave_1 entered promiscuous mode [ 941.757762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 941.766762] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 941.785160] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 941.792310] team0: Port device team_slave_0 added [ 941.797811] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 941.805322] team0: Port device team_slave_1 added [ 941.812043] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 941.822100] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 941.883886] device hsr_slave_0 entered promiscuous mode [ 941.920481] device hsr_slave_1 entered promiscuous mode [ 941.964852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 941.972084] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 942.021330] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.027719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.034385] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.040784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.074810] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 942.081405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.089892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 942.103112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 942.110957] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.117593] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.127166] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 942.133640] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.147469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 942.155225] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.161742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.172364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 942.180878] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.187328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.211204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 942.218988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 942.226806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 942.234592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 942.243125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 942.256735] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 942.263097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 942.275994] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 942.285116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 942.292287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 942.304136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.345166] device bridge_slave_1 left promiscuous mode [ 942.350948] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.391150] device bridge_slave_0 left promiscuous mode [ 942.396666] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.451894] device veth1_vlan left promiscuous mode [ 942.456988] device veth0_vlan left promiscuous mode [ 942.553829] device hsr_slave_1 left promiscuous mode [ 942.592984] device hsr_slave_0 left promiscuous mode [ 942.634074] team0 (unregistering): Port device team_slave_1 removed [ 942.644724] team0 (unregistering): Port device team_slave_0 removed [ 942.653954] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 942.705688] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 942.768700] bond0 (unregistering): Released all slaves [ 942.813806] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 942.843587] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 942.854217] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 942.861676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 942.869553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 942.926942] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 942.934936] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 942.945372] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 942.956823] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 942.967200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 942.975330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 942.989230] device veth0_vlan entered promiscuous mode [ 942.996906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 943.008704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 943.019262] device veth1_vlan entered promiscuous mode [ 943.026315] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 943.037375] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 943.840485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 943.848116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 944.382363] IPVS: ftp: loaded support on port[0] = 21 [ 944.480111] protocol 88fb is buggy, dev hsr_slave_0 [ 944.485289] protocol 88fb is buggy, dev hsr_slave_1 [ 944.790130] protocol 88fb is buggy, dev hsr_slave_0 [ 944.795309] protocol 88fb is buggy, dev hsr_slave_1 [ 945.033935] chnl_net:caif_netlink_parms(): no params data found 17:48:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", 0x0}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 945.075157] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.081695] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.088699] device bridge_slave_0 entered promiscuous mode [ 945.097202] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.103987] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.112664] device bridge_slave_1 entered promiscuous mode [ 945.133894] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 945.142919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 945.160629] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 945.167684] team0: Port device team_slave_0 added [ 945.173450] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 945.180798] team0: Port device team_slave_1 added [ 945.186188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 945.193879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 945.252974] device hsr_slave_0 entered promiscuous mode [ 945.290399] device hsr_slave_1 entered promiscuous mode [ 945.331133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 945.338361] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 945.426045] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.432441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.439010] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.445398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.476062] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 945.482439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.498876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 945.508676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 945.516133] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.523114] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.536473] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 945.542671] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.551977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 945.559546] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.565921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.584110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 945.591904] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.598246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.612966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 945.621004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 945.628448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 945.636665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 945.649143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 945.659280] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 945.665763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 945.684647] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 945.692989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 945.699684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 945.711636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.783461] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 945.794014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 945.836412] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 945.844109] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 945.851078] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 945.864206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 945.872194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 945.878962] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 945.887737] device veth0_vlan entered promiscuous mode [ 945.898772] device veth1_vlan entered promiscuous mode [ 945.904692] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 945.913584] device bridge_slave_1 left promiscuous mode [ 945.919092] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.951155] device bridge_slave_0 left promiscuous mode [ 945.956647] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.012184] device veth1_vlan left promiscuous mode [ 946.017267] device veth0_vlan left promiscuous mode [ 946.121670] device hsr_slave_1 left promiscuous mode [ 946.162974] device hsr_slave_0 left promiscuous mode [ 946.214556] team0 (unregistering): Port device team_slave_1 removed [ 946.224003] team0 (unregistering): Port device team_slave_0 removed [ 946.233332] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 946.274948] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 946.328544] bond0 (unregistering): Released all slaves [ 946.367656] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 946.374690] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 946.382190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 946.389334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 947.190169] protocol 88fb is buggy, dev hsr_slave_0 [ 947.195279] protocol 88fb is buggy, dev hsr_slave_1 17:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d260000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", 0x0}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/21, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb62713", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb62713", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/21, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/21, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 949.411964] device bridge_slave_1 left promiscuous mode [ 949.417533] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.462822] device bridge_slave_0 left promiscuous mode [ 949.468396] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.542633] device veth1_vlan left promiscuous mode [ 949.551816] device veth0_vlan left promiscuous mode [ 949.773613] device hsr_slave_1 left promiscuous mode [ 949.813865] device hsr_slave_0 left promiscuous mode [ 949.883116] team0 (unregistering): Port device team_slave_1 removed [ 949.893920] team0 (unregistering): Port device team_slave_0 removed [ 949.902871] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 949.953622] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 950.028856] bond0 (unregistering): Released all slaves [ 951.741681] IPVS: ftp: loaded support on port[0] = 21 [ 952.522203] IPVS: ftp: loaded support on port[0] = 21 [ 952.589798] chnl_net:caif_netlink_parms(): no params data found [ 952.651580] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.657994] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.665327] device bridge_slave_0 entered promiscuous mode [ 952.672743] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.679096] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.686226] device bridge_slave_1 entered promiscuous mode [ 952.730821] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 952.743867] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 952.758154] chnl_net:caif_netlink_parms(): no params data found [ 952.780205] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 952.787341] team0: Port device team_slave_0 added [ 952.793696] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 952.801576] team0: Port device team_slave_1 added [ 952.812050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 952.820438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 952.883918] device hsr_slave_0 entered promiscuous mode [ 952.930460] device hsr_slave_1 entered promiscuous mode [ 952.975517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 952.983107] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 952.989851] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.996394] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.005732] device bridge_slave_0 entered promiscuous mode [ 953.017106] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.025925] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.033031] device bridge_slave_1 entered promiscuous mode [ 953.060446] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 953.072237] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 953.099745] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 953.107008] team0: Port device team_slave_0 added [ 953.114220] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 953.121376] team0: Port device team_slave_1 added [ 953.129253] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 953.144334] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 953.192453] device hsr_slave_0 entered promiscuous mode [ 953.240479] device hsr_slave_1 entered promiscuous mode [ 953.284840] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.291259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.297850] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.304242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.312570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 953.322689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 953.385437] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.391878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.398516] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.404943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.433388] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 953.439509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.451021] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 953.462401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.469416] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.476197] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.483580] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.490294] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.499375] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 953.506033] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.524758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 953.534454] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.540867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.553223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.563933] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 953.575995] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 953.583476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 953.591297] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.597643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.606998] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 953.615078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.625849] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 953.634143] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 953.641350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 953.651641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 953.659273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 953.666572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 953.676367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 953.683606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 953.691069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 953.698708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 953.707546] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 953.714943] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.724145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 953.734677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 953.742529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 953.749590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 953.757551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 953.765112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 953.772863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 953.780423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 953.788276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 953.796108] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.802504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.811747] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 953.817798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 953.827959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 953.836157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 953.844962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 953.852743] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.859081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.875074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 953.883110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 953.894875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 953.902703] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 953.909596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.918716] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 953.931000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 953.938182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 953.947624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.954524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 953.962686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 953.971722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.978025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 953.989363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 953.998038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 954.008268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 954.018848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 954.026044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 954.034392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 954.045276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 954.055222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.065853] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 954.074016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 954.081671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.089231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 954.107416] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 954.118483] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 954.128999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 954.136547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 954.149633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.168827] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 954.180475] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 954.187672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 954.196633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 954.247372] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 954.255104] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 954.263110] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 954.273454] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 954.280487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 954.287992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 954.296704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 954.303812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 954.314588] device veth0_vlan entered promiscuous mode [ 954.323536] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 954.335227] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 954.343528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 954.351904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 954.367932] device veth1_vlan entered promiscuous mode [ 954.375156] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 954.386263] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 954.411643] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 954.418716] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 954.426080] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 954.435940] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 954.442911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 954.450966] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 954.458582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 954.466975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 954.475301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 954.482445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 954.493127] device veth0_vlan entered promiscuous mode [ 954.505726] device veth1_vlan entered promiscuous mode [ 954.512396] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 954.522760] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 954.580879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 954.588658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 954.870211] protocol 88fb is buggy, dev hsr_slave_0 [ 954.875358] protocol 88fb is buggy, dev hsr_slave_1 17:48:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", 0x0}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb62713", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 955.830122] protocol 88fb is buggy, dev hsr_slave_0 [ 955.835256] protocol 88fb is buggy, dev hsr_slave_1 [ 956.150635] protocol 88fb is buggy, dev hsr_slave_0 [ 956.155754] protocol 88fb is buggy, dev hsr_slave_1 17:48:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:30 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736ba", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:30 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736ba", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 956.732244] device bridge_slave_1 left promiscuous mode [ 956.745219] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.801221] device bridge_slave_0 left promiscuous mode [ 956.809321] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.988430] device veth1_vlan left promiscuous mode 17:48:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/27, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 957.055765] device veth0_vlan left promiscuous mode 17:48:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736ba", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 957.535171] device hsr_slave_1 left promiscuous mode [ 957.586064] device hsr_slave_0 left promiscuous mode [ 957.644321] team0 (unregistering): Port device team_slave_1 removed [ 957.673664] team0 (unregistering): Port device team_slave_0 removed [ 957.710115] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 957.754612] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 957.860788] bond0 (unregistering): Released all slaves [ 960.090924] IPVS: ftp: loaded support on port[0] = 21 [ 960.863318] IPVS: ftp: loaded support on port[0] = 21 [ 960.926115] chnl_net:caif_netlink_parms(): no params data found [ 961.016167] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.022693] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.029646] device bridge_slave_0 entered promiscuous mode [ 961.039500] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.046018] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.056364] device bridge_slave_1 entered promiscuous mode [ 961.099638] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 961.107420] chnl_net:caif_netlink_parms(): no params data found [ 961.119411] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 961.150839] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 961.158122] team0: Port device team_slave_0 added [ 961.168582] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 961.175789] team0: Port device team_slave_1 added [ 961.181940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 961.196803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 961.217352] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.224050] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.231412] device bridge_slave_0 entered promiscuous mode [ 961.248179] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.254739] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.262252] device bridge_slave_1 entered promiscuous mode [ 961.304107] device hsr_slave_0 entered promiscuous mode [ 961.350539] device hsr_slave_1 entered promiscuous mode [ 961.415845] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 961.433062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 961.441978] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 961.456956] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 961.488901] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 961.496148] team0: Port device team_slave_0 added [ 961.504722] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 961.514783] team0: Port device team_slave_1 added [ 961.526830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 961.534805] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 961.605012] device hsr_slave_0 entered promiscuous mode [ 961.650439] device hsr_slave_1 entered promiscuous mode [ 961.703509] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 961.716241] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 961.753375] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.759753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.766390] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.772744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.814471] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.821009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.827603] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.833984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.873626] device bridge_slave_1 left promiscuous mode [ 961.879174] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.910743] device bridge_slave_0 left promiscuous mode [ 961.916239] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.971942] device veth1_vlan left promiscuous mode [ 961.977014] device veth0_vlan left promiscuous mode [ 962.072840] device hsr_slave_1 left promiscuous mode [ 962.112954] device hsr_slave_0 left promiscuous mode [ 962.153364] team0 (unregistering): Port device team_slave_1 removed [ 962.166141] team0 (unregistering): Port device team_slave_0 removed [ 962.176381] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 962.225292] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 962.290682] bond0 (unregistering): Released all slaves [ 962.336182] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 962.342724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.352108] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.358762] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.366708] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 962.373995] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.380769] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.395802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.404268] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 962.413980] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 962.423255] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 962.429332] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.436517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 962.443629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 962.453379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 962.461865] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 962.468779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 962.476635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 962.484728] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.491115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.500581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 962.513703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 962.521932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 962.529682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 962.537451] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.543841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.551069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 962.559556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 962.569620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 962.576814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 962.585316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 962.592584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 962.604466] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 962.610807] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.619800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 962.628656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 962.680348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 962.690606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 962.702580] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.708937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.718233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 962.732343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 962.743382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 962.758099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 962.765994] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 962.778027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 962.785931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 962.799149] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.805548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.817643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 962.825645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 962.841063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 962.856743] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 962.866234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 962.879281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 962.887841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 962.900928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 962.908449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 962.923650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 962.937173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 962.945215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 962.953768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 962.961784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 962.969307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 962.979890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 962.989962] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 962.997098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 963.004267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 963.012713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 963.021087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 963.031938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 963.048269] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 963.055444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 963.064785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 963.077251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 963.086061] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 963.093506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 963.101948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 963.109426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 963.116799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 963.127102] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 963.134682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 963.154341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.163992] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 963.183413] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 963.189796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 963.200443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 963.230967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.342095] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 963.365938] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 963.383285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.408850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 963.471237] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 963.487007] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 963.494603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.503862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 963.516459] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 963.525040] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 963.532689] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 963.544661] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 963.552736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 963.566515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 963.576813] device veth0_vlan entered promiscuous mode [ 963.584415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 963.592232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 963.611544] device veth1_vlan entered promiscuous mode [ 963.617588] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 963.627802] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 963.651515] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 963.658782] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 963.666969] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 963.678279] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 963.685966] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 963.693879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 963.701871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 963.709300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 963.719417] device veth0_vlan entered promiscuous mode [ 963.730828] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 963.737792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 963.746479] device veth1_vlan entered promiscuous mode [ 963.752694] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 963.764015] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 964.150401] protocol 88fb is buggy, dev hsr_slave_0 [ 964.155517] protocol 88fb is buggy, dev hsr_slave_1 [ 964.370183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 964.377604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 964.470183] protocol 88fb is buggy, dev hsr_slave_0 [ 964.475308] protocol 88fb is buggy, dev hsr_slave_1 17:48:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/27, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 965.270408] protocol 88fb is buggy, dev hsr_slave_0 [ 965.275522] protocol 88fb is buggy, dev hsr_slave_1 17:48:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:39 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/27, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736ba", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:39 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736ba", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, 0x0, 0x0, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 966.482306] device bridge_slave_1 left promiscuous mode [ 966.540455] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.594154] device bridge_slave_0 left promiscuous mode [ 966.599864] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.669433] device veth1_vlan left promiscuous mode [ 966.700152] device veth0_vlan left promiscuous mode [ 966.857636] device hsr_slave_1 left promiscuous mode [ 966.917545] device hsr_slave_0 left promiscuous mode [ 966.977666] team0 (unregistering): Port device team_slave_1 removed [ 966.988730] team0 (unregistering): Port device team_slave_0 removed [ 967.003449] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 967.057083] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 967.149086] bond0 (unregistering): Released all slaves [ 969.261484] IPVS: ftp: loaded support on port[0] = 21 [ 970.073682] IPVS: ftp: loaded support on port[0] = 21 [ 970.145039] chnl_net:caif_netlink_parms(): no params data found [ 970.211041] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.217494] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.224973] device bridge_slave_0 entered promiscuous mode [ 970.232510] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.238874] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.246017] device bridge_slave_1 entered promiscuous mode [ 970.278403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 970.308944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 970.336250] chnl_net:caif_netlink_parms(): no params data found [ 970.354635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 970.362163] team0: Port device team_slave_0 added [ 970.374208] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 970.382620] team0: Port device team_slave_1 added [ 970.388232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 970.406917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 970.453382] device hsr_slave_0 entered promiscuous mode [ 970.490341] device hsr_slave_1 entered promiscuous mode [ 970.556476] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 970.572948] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 970.579659] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.586092] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.593415] device bridge_slave_0 entered promiscuous mode [ 970.612725] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.619162] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.626377] device bridge_slave_1 entered promiscuous mode [ 970.663597] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 970.675340] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 970.707787] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 970.715642] team0: Port device team_slave_0 added [ 970.724476] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 970.734269] team0: Port device team_slave_1 added [ 970.739963] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 970.754724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 970.822383] device hsr_slave_0 entered promiscuous mode [ 970.870480] device hsr_slave_1 entered promiscuous mode [ 970.921959] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 970.929414] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 970.947871] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.954249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.960885] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.967221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.023712] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.030120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.036726] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.043190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.060513] device bridge_slave_1 left promiscuous mode [ 971.066054] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.090961] device bridge_slave_0 left promiscuous mode [ 971.096461] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.152007] device veth1_vlan left promiscuous mode [ 971.157087] device veth0_vlan left promiscuous mode [ 971.272410] device hsr_slave_1 left promiscuous mode [ 971.312848] device hsr_slave_0 left promiscuous mode [ 971.354309] team0 (unregistering): Port device team_slave_1 removed [ 971.365525] team0 (unregistering): Port device team_slave_0 removed [ 971.374731] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 971.423266] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 971.500361] bond0 (unregistering): Released all slaves [ 971.539714] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.546703] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.557274] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.563898] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.588054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.597439] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 971.606534] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 971.615386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 971.622346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 971.637285] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 971.643501] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.657675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 971.666153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 971.676924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 971.684756] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.691123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.701304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 971.710153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 971.717914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 971.725689] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.732098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.741457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 971.749802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 971.806686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 971.816151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.823535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 971.843336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 971.851205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 971.858819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 971.869413] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 971.881948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 971.888811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 971.896150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 971.904547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 971.914770] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 971.927545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 971.934967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 971.947965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 971.966702] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 971.973436] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.979655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 971.987482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 971.997751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 972.011535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 972.018580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 972.030949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 972.038471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 972.051645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 972.059295] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.065675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.081081] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 972.087118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 972.103215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 972.110907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 972.118584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 972.126939] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.133330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.147723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 972.155314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 972.165015] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 972.174577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 972.183150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 972.192845] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 972.206234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 972.213958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 972.225857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 972.232905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 972.246679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 972.258529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.268146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 972.276000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 972.284012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 972.293704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 972.311133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 972.325694] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 972.333415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 972.342093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 972.349604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 972.364481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 972.374484] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 972.384763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 972.409189] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 972.417729] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 972.426504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 972.433488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 972.446582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.547849] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 972.573290] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 972.591101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 972.599574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 972.641719] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 972.661598] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 972.668682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 972.685664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 972.756855] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 972.777588] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 972.796997] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 972.810964] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 972.817981] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 972.824968] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 972.832606] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 972.840935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 972.848360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 972.857700] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 972.866258] device veth0_vlan entered promiscuous mode [ 972.872620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 972.879614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 972.887263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 972.894674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 972.903322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 972.910575] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 972.919609] device veth0_vlan entered promiscuous mode [ 972.936997] device veth1_vlan entered promiscuous mode [ 972.945368] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 972.959572] device veth1_vlan entered promiscuous mode [ 972.966595] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 972.978537] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 972.988840] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 973.560257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 973.567488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 973.574902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 973.582293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 974.230146] protocol 88fb is buggy, dev hsr_slave_0 [ 974.235290] protocol 88fb is buggy, dev hsr_slave_1 [ 974.560164] protocol 88fb is buggy, dev hsr_slave_0 [ 974.565338] protocol 88fb is buggy, dev hsr_slave_1 [ 974.570461] protocol 88fb is buggy, dev hsr_slave_0 [ 974.575509] protocol 88fb is buggy, dev hsr_slave_1 17:48:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e65"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736ba", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, 0x0, 0x0, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, 0x0, 0x0, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 974.870312] protocol 88fb is buggy, dev hsr_slave_0 [ 974.875428] protocol 88fb is buggy, dev hsr_slave_1 [ 974.880612] protocol 88fb is buggy, dev hsr_slave_0 [ 974.885679] protocol 88fb is buggy, dev hsr_slave_1 17:48:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e65"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:48 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080), 0x0, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080), 0x0, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080), 0x0, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 976.070549] device bridge_slave_1 left promiscuous mode [ 976.094620] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.171664] device bridge_slave_0 left promiscuous mode [ 976.178824] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.254394] device veth1_vlan left promiscuous mode [ 976.261537] device veth0_vlan left promiscuous mode [ 976.464313] device hsr_slave_1 left promiscuous mode [ 976.526918] device hsr_slave_0 left promiscuous mode [ 976.583783] team0 (unregistering): Port device team_slave_1 removed [ 976.614105] team0 (unregistering): Port device team_slave_0 removed [ 976.643110] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 976.715297] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 976.788985] bond0 (unregistering): Released all slaves [ 978.571502] IPVS: ftp: loaded support on port[0] = 21 [ 979.350007] chnl_net:caif_netlink_parms(): no params data found [ 979.388421] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.395868] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.403020] device bridge_slave_0 entered promiscuous mode [ 979.409753] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.416285] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.423426] device bridge_slave_1 entered promiscuous mode [ 979.442329] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 979.451849] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 979.468822] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 979.475974] team0: Port device team_slave_0 added [ 979.481894] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 979.488939] team0: Port device team_slave_1 added [ 979.494471] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 979.501937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 979.562325] device hsr_slave_0 entered promiscuous mode [ 979.600367] device hsr_slave_1 entered promiscuous mode [ 979.640898] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 979.648161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 979.694365] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.700789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.707376] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.713788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.747062] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 979.753909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.763221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 979.772910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.780119] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.786773] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.796607] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 979.802864] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.811931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.819593] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.825981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.840506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 979.848114] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.854497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.871724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 979.879329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 979.887224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 979.896128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 979.904391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 979.914713] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 979.921097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 979.935411] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 979.943800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 979.951166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 979.963289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.028982] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 980.039463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 980.078238] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 980.085516] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 980.092825] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 980.103169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 980.111225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 980.118082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 980.126861] device veth0_vlan entered promiscuous mode [ 980.137595] device veth1_vlan entered promiscuous mode [ 980.144680] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 980.154502] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 980.340811] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 980.347890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 980.355163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 981.910298] net_ratelimit: 2 callbacks suppressed [ 981.910304] protocol 88fb is buggy, dev hsr_slave_0 [ 981.920428] protocol 88fb is buggy, dev hsr_slave_1 17:48:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e65"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{0x0}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb669", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb669", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{0x0}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 982.550517] protocol 88fb is buggy, dev hsr_slave_0 [ 982.555662] protocol 88fb is buggy, dev hsr_slave_1 17:48:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{0x0}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb669", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 982.870159] protocol 88fb is buggy, dev hsr_slave_0 [ 982.875372] protocol 88fb is buggy, dev hsr_slave_1 17:48:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:57 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:48:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:48:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 983.571644] device bridge_slave_1 left promiscuous mode [ 983.581457] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.650931] device bridge_slave_0 left promiscuous mode [ 983.658872] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.898972] device veth1_vlan left promiscuous mode [ 983.913243] device veth0_vlan left promiscuous mode [ 983.990166] protocol 88fb is buggy, dev hsr_slave_0 [ 983.995309] protocol 88fb is buggy, dev hsr_slave_1 [ 984.245557] device hsr_slave_1 left promiscuous mode [ 984.306820] device hsr_slave_0 left promiscuous mode [ 984.367085] team0 (unregistering): Port device team_slave_1 removed [ 984.391499] team0 (unregistering): Port device team_slave_0 removed [ 984.418235] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 984.445115] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 984.519780] bond0 (unregistering): Released all slaves [ 986.130953] IPVS: ftp: loaded support on port[0] = 21 [ 986.919590] chnl_net:caif_netlink_parms(): no params data found [ 986.959252] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.965875] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.972990] device bridge_slave_0 entered promiscuous mode [ 986.979834] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.986540] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.993721] device bridge_slave_1 entered promiscuous mode [ 987.011787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 987.021126] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 987.037927] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 987.045104] team0: Port device team_slave_0 added [ 987.051022] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 987.058091] team0: Port device team_slave_1 added [ 987.063823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 987.071323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 987.132342] device hsr_slave_0 entered promiscuous mode [ 987.170350] device hsr_slave_1 entered promiscuous mode [ 987.210764] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 987.217863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 987.262986] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.269507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.276168] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.282534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.316038] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 987.322593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.331766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 987.340998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 987.348084] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.355607] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.366558] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 987.373670] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.384093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 987.393137] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.399516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.409132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 987.417333] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.423729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.441741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 987.449439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 987.458860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 987.466111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 987.476439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 987.486725] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 987.492926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 987.507422] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 987.515238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 987.522512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 987.535583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.599447] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 987.611736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 987.651247] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 987.658265] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 987.665289] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 987.675515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 987.683294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 987.692177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 987.701422] device veth0_vlan entered promiscuous mode [ 987.711132] device veth1_vlan entered promiscuous mode [ 987.716883] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 987.727027] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 987.910415] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 987.917526] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 987.925075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 989.120146] protocol 88fb is buggy, dev hsr_slave_0 [ 989.125337] protocol 88fb is buggy, dev hsr_slave_1 [ 989.430148] protocol 88fb is buggy, dev hsr_slave_0 [ 989.435304] protocol 88fb is buggy, dev hsr_slave_1 [ 989.440465] protocol 88fb is buggy, dev hsr_slave_0 [ 989.445577] protocol 88fb is buggy, dev hsr_slave_1 17:49:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:03 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe80573418"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe80573418"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 990.240110] protocol 88fb is buggy, dev hsr_slave_0 [ 990.245344] protocol 88fb is buggy, dev hsr_slave_1 17:49:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 991.351835] device bridge_slave_1 left promiscuous mode [ 991.361726] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.433066] device bridge_slave_0 left promiscuous mode [ 991.510140] protocol 88fb is buggy, dev hsr_slave_0 [ 991.515324] protocol 88fb is buggy, dev hsr_slave_1 [ 991.568676] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.648969] device veth1_vlan left promiscuous mode [ 991.657602] device veth0_vlan left promiscuous mode [ 991.923077] device hsr_slave_1 left promiscuous mode [ 991.983876] device hsr_slave_0 left promiscuous mode [ 992.043604] team0 (unregistering): Port device team_slave_1 removed [ 992.054910] team0 (unregistering): Port device team_slave_0 removed [ 992.065394] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 992.125596] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 992.222953] bond0 (unregistering): Released all slaves [ 994.091611] IPVS: ftp: loaded support on port[0] = 21 [ 994.867837] chnl_net:caif_netlink_parms(): no params data found [ 994.908679] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.915328] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.922505] device bridge_slave_0 entered promiscuous mode [ 994.929259] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.935983] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.943086] device bridge_slave_1 entered promiscuous mode [ 994.961232] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 994.970279] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 994.986810] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 994.993969] team0: Port device team_slave_0 added [ 994.999458] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 995.006729] team0: Port device team_slave_1 added [ 995.012210] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 995.019757] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 995.073919] device hsr_slave_0 entered promiscuous mode [ 995.111005] device hsr_slave_1 entered promiscuous mode [ 995.180795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 995.189031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 995.235070] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.241492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.248064] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.254452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.287096] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 995.293792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.302739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 995.314098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 995.321312] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.327923] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.337800] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 995.344215] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.354201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 995.362112] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.368441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.381484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 995.389089] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.395476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.410587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 995.418166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 995.426281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 995.435580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 995.447760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 995.457041] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 995.463689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 995.476831] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 995.485425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 995.492523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 995.505778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.573490] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 995.583692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 995.622455] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 995.629514] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 995.637005] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 995.646977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 995.655314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 995.663247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 995.672633] device veth0_vlan entered promiscuous mode [ 995.683170] device veth1_vlan entered promiscuous mode [ 995.688936] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 995.698044] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 995.860479] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 995.867556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 995.875167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 997.110166] net_ratelimit: 2 callbacks suppressed [ 997.110172] protocol 88fb is buggy, dev hsr_slave_0 [ 997.120329] protocol 88fb is buggy, dev hsr_slave_1 17:49:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe80573418"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:11 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f1"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f1"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 997.990125] protocol 88fb is buggy, dev hsr_slave_0 [ 997.995254] protocol 88fb is buggy, dev hsr_slave_1 17:49:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="0000000000000000010000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="0010000000000000050000000000000017010000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="0000000000000000010000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:12 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="0010000000000000050000000000000017010000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:12 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="0000000000000000010000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 999.065838] device bridge_slave_1 left promiscuous mode [ 999.125180] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.183165] device bridge_slave_0 left promiscuous mode [ 999.190667] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.253269] device veth1_vlan left promiscuous mode [ 999.260410] device veth0_vlan left promiscuous mode [ 999.456996] device hsr_slave_1 left promiscuous mode [ 999.496889] device hsr_slave_0 left promiscuous mode [ 999.537454] team0 (unregistering): Port device team_slave_1 removed [ 999.564317] team0 (unregistering): Port device team_slave_0 removed [ 999.578123] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 999.624304] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 999.679153] bond0 (unregistering): Released all slaves [ 1001.431678] IPVS: ftp: loaded support on port[0] = 21 [ 1002.242950] chnl_net:caif_netlink_parms(): no params data found [ 1002.288705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.295283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.302981] device bridge_slave_0 entered promiscuous mode [ 1002.309754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.316275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.323535] device bridge_slave_1 entered promiscuous mode [ 1002.346339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1002.355330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1002.377057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1002.384286] team0: Port device team_slave_0 added [ 1002.391010] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1002.398359] team0: Port device team_slave_1 added [ 1002.404524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1002.412274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1002.472860] device hsr_slave_0 entered promiscuous mode [ 1002.510524] device hsr_slave_1 entered promiscuous mode [ 1002.554099] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1002.561431] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1002.610406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.616788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.623502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.629936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.665434] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1002.672004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.681871] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1002.694056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1002.701385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.708050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.718817] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1002.725407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.734170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1002.741901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.748232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.770786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1002.778364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.784756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.793272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1002.800989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1002.815101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1002.822096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1002.834899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1002.845307] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1002.851969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1002.859133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1002.872734] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1002.880601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1002.887289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1002.897806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.915078] device bridge_slave_1 left promiscuous mode [ 1002.920756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.951159] device bridge_slave_0 left promiscuous mode [ 1002.956655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.011961] device veth1_vlan left promiscuous mode [ 1003.017026] device veth0_vlan left promiscuous mode [ 1003.133624] device hsr_slave_1 left promiscuous mode [ 1003.184397] device hsr_slave_0 left promiscuous mode [ 1003.232983] team0 (unregistering): Port device team_slave_1 removed [ 1003.243674] team0 (unregistering): Port device team_slave_0 removed [ 1003.252787] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1003.293931] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1003.372590] bond0 (unregistering): Released all slaves [ 1003.433530] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1003.490942] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1003.499901] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1003.508148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1003.517611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1003.555578] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1003.563097] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1003.569636] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1003.606024] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1003.612990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1003.624818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1003.634509] device veth0_vlan entered promiscuous mode [ 1003.645771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1003.653458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1003.669470] device veth1_vlan entered promiscuous mode [ 1003.676902] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1003.692085] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1004.480553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1004.487808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1005.360164] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.365331] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.430402] protocol 88fb is buggy, dev hsr_slave_0 [ 1005.435539] protocol 88fb is buggy, dev hsr_slave_1 [ 1005.750161] protocol 88fb is buggy, dev hsr_slave_0 17:49:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f1"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="0010000000000000050000000000000017010000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:19 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/21, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/21, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/21, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 1006.972347] device bridge_slave_1 left promiscuous mode [ 1006.977899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.031564] device bridge_slave_0 left promiscuous mode [ 1007.037110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.093390] device veth1_vlan left promiscuous mode [ 1007.098538] device veth0_vlan left promiscuous mode [ 1007.273179] device hsr_slave_1 left promiscuous mode [ 1007.314814] device hsr_slave_0 left promiscuous mode [ 1007.354809] team0 (unregistering): Port device team_slave_1 removed [ 1007.382410] team0 (unregistering): Port device team_slave_0 removed [ 1007.406971] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1007.464713] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1007.568017] bond0 (unregistering): Released all slaves [ 1009.521585] IPVS: ftp: loaded support on port[0] = 21 [ 1010.264239] IPVS: ftp: loaded support on port[0] = 21 [ 1010.320701] chnl_net:caif_netlink_parms(): no params data found [ 1010.405562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.412243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.419141] device bridge_slave_0 entered promiscuous mode [ 1010.426550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.432983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.441938] device bridge_slave_1 entered promiscuous mode [ 1010.464346] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1010.472078] chnl_net:caif_netlink_parms(): no params data found [ 1010.483293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1010.510984] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1010.518170] team0: Port device team_slave_0 added [ 1010.528414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1010.535805] team0: Port device team_slave_1 added [ 1010.541541] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1010.555637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1010.574599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.581063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.587945] device bridge_slave_0 entered promiscuous mode [ 1010.599520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.606194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.613946] device bridge_slave_1 entered promiscuous mode [ 1010.663120] device hsr_slave_0 entered promiscuous mode [ 1010.700544] device hsr_slave_1 entered promiscuous mode [ 1010.767643] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1010.775653] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1010.783605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1010.794167] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1010.825678] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1010.835153] team0: Port device team_slave_0 added [ 1010.843717] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1010.851161] team0: Port device team_slave_1 added [ 1010.859230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1010.874685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1010.943829] device hsr_slave_0 entered promiscuous mode [ 1010.980539] device hsr_slave_1 entered promiscuous mode [ 1011.024915] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1011.032928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1011.050310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.056699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.063390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.069760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.123561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.129925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.136604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.143038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.168815] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1011.175378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.184861] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1011.195644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1011.203189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.210146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.217284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.224251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.234658] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1011.241383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.256383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1011.264088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.270483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.277612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1011.285633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.292031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.312502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.322939] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1011.330364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1011.338003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1011.351712] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1011.359033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1011.367503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1011.375637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1011.387062] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1011.394563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1011.405013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1011.412299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1011.419242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1011.426458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1011.434184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1011.441608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1011.449091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1011.458929] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1011.466122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.474940] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1011.481860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1011.489677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1011.497733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1011.506274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1011.514049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.520449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.529745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1011.538677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1011.546613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1011.554283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.560662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.569812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1011.580452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1011.591819] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1011.599084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1011.606978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1011.616145] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1011.622844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1011.629506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1011.638353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1011.646236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1011.656445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1011.664191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1011.674895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1011.682702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1011.691094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1011.702557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.710759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1011.717652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1011.725761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1011.736418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1011.745033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1011.754475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1011.764408] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1011.770891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1011.787325] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1011.795522] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1011.802671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1011.809355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1011.822889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.844719] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1011.855789] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1011.864560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1011.876913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1011.918862] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1011.926801] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1011.933867] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1011.944221] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1011.951892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1011.959461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1011.969156] device veth0_vlan entered promiscuous mode [ 1011.976697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1011.984452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1011.995660] device veth1_vlan entered promiscuous mode [ 1012.001996] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1012.015168] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1012.024841] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1012.033707] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1012.041888] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1012.049563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1012.057748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1012.065779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1012.098384] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1012.105820] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1012.113340] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1012.123307] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1012.130562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1012.137893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1012.145855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1012.153820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.162787] device veth0_vlan entered promiscuous mode [ 1012.173990] device veth1_vlan entered promiscuous mode [ 1012.179720] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1012.189762] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1012.330734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1012.337975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1013.110286] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.115448] protocol 88fb is buggy, dev hsr_slave_1 17:49:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/25, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) 17:49:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:27 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:27 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/25, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) [ 1013.750212] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.755450] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.990248] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.995395] protocol 88fb is buggy, dev hsr_slave_1 17:49:28 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r2, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000500)=""/164) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000000000100"/28, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) 17:49:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/25, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9df"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/27, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9df"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/27, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 1014.966644] device bridge_slave_1 left promiscuous mode [ 1014.974769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.030888] device bridge_slave_0 left promiscuous mode [ 1015.037819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.093200] device veth1_vlan left promiscuous mode [ 1015.100692] device veth0_vlan left promiscuous mode 17:49:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/27, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 1015.190112] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.195288] protocol 88fb is buggy, dev hsr_slave_1 [ 1015.673892] device hsr_slave_1 left promiscuous mode [ 1015.725566] device hsr_slave_0 left promiscuous mode [ 1015.786333] team0 (unregistering): Port device team_slave_1 removed [ 1015.810616] team0 (unregistering): Port device team_slave_0 removed [ 1015.831286] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1015.884554] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1015.967527] bond0 (unregistering): Released all slaves [ 1018.041480] IPVS: ftp: loaded support on port[0] = 21 [ 1018.849999] chnl_net:caif_netlink_parms(): no params data found [ 1018.851638] IPVS: ftp: loaded support on port[0] = 21 [ 1018.894739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.901264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.908165] device bridge_slave_0 entered promiscuous mode [ 1018.924917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.931485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.938383] device bridge_slave_1 entered promiscuous mode [ 1018.962743] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1018.973844] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1018.998082] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1019.005278] team0: Port device team_slave_0 added [ 1019.011185] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1019.018286] team0: Port device team_slave_1 added [ 1019.024175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1019.032496] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1019.104569] device hsr_slave_0 entered promiscuous mode [ 1019.160525] device hsr_slave_1 entered promiscuous mode [ 1019.215517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1019.224708] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1019.286761] chnl_net:caif_netlink_parms(): no params data found [ 1019.353945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.360802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.367882] device bridge_slave_0 entered promiscuous mode [ 1019.378685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.385190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.392233] device bridge_slave_1 entered promiscuous mode [ 1019.416447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1019.426004] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1019.439444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.445816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.452503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.458844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.474577] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1019.482056] team0: Port device team_slave_0 added [ 1019.491472] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1019.498577] team0: Port device team_slave_1 added [ 1019.504855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1019.514937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1019.562715] device hsr_slave_0 entered promiscuous mode [ 1019.610509] device hsr_slave_1 entered promiscuous mode [ 1019.651142] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1019.658728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1019.730695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.737082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.743742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.750149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.764169] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1019.771025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.784749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1019.795839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1019.803104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.820598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.828147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.835297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.844140] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1019.853447] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1019.859517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.875236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1019.883587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1019.891868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1019.899428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.905841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.915948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1019.923672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1019.931820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1019.939473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.945865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.955552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1019.965143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1019.979895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1019.989368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.000772] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1020.012407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.020111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.028655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1020.039353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.046747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.054867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.068911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.076858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1020.087148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1020.095231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.103628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.111262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.118725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.128001] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1020.139533] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1020.145704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1020.154768] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1020.164855] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1020.171464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.178123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.185169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.195971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1020.206745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1020.214746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.223265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.229621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.238879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1020.248098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1020.256256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.263981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.270374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.285002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1020.292551] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1020.299241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.309192] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1020.317126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1020.328073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1020.335391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1020.342301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1020.349014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.356931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.365023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.376592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.389022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.398223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1020.408855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1020.415997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.424193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.432369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.439822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.450487] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1020.462605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.471795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.482499] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1020.488553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1020.505187] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1020.513380] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1020.519619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1020.527862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1020.539767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.564279] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1020.575512] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1020.583180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1020.591650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1020.601147] device bridge_slave_1 left promiscuous mode [ 1020.606621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.641131] device bridge_slave_0 left promiscuous mode [ 1020.646656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.701977] device bridge_slave_1 left promiscuous mode [ 1020.707493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.760777] device bridge_slave_0 left promiscuous mode [ 1020.766271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.813893] device veth1_vlan left promiscuous mode [ 1020.819020] device veth0_vlan left promiscuous mode [ 1020.824380] device veth1_vlan left promiscuous mode [ 1020.829449] device veth0_vlan left promiscuous mode [ 1020.963521] device hsr_slave_1 left promiscuous mode [ 1021.024091] device hsr_slave_0 left promiscuous mode [ 1021.064179] team0 (unregistering): Port device team_slave_1 removed [ 1021.074357] team0 (unregistering): Port device team_slave_0 removed [ 1021.084690] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1021.133271] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1021.218986] bond0 (unregistering): Released all slaves [ 1021.322501] device hsr_slave_1 left promiscuous mode [ 1021.362981] device hsr_slave_0 left promiscuous mode [ 1021.403077] team0 (unregistering): Port device team_slave_1 removed [ 1021.414250] team0 (unregistering): Port device team_slave_0 removed [ 1021.423339] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1021.473163] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1021.549510] bond0 (unregistering): Released all slaves [ 1021.632874] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1021.642376] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1021.649010] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1021.658397] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1021.669770] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1021.677631] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1021.684844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1021.692875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1021.702247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1021.709964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1021.718024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1021.725585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1021.734377] device veth0_vlan entered promiscuous mode [ 1021.748645] device veth1_vlan entered promiscuous mode [ 1021.754455] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1021.764535] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1021.781128] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1021.788587] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1021.796311] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1021.806453] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1021.813241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1021.821680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1021.828830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1021.836708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1021.847404] device veth0_vlan entered promiscuous mode [ 1021.853484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1021.860833] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1021.953855] device veth1_vlan entered promiscuous mode [ 1021.959722] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1021.973614] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1022.070129] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.075218] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.390149] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.395287] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.640306] protocol 88fb is buggy, dev hsr_slave_0 [ 1022.645530] protocol 88fb is buggy, dev hsr_slave_1 [ 1022.650868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1022.658048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 17:49:36 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r2, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/25, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:36 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r2, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:37 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 1023.510125] protocol 88fb is buggy, dev hsr_slave_0 [ 1023.515288] protocol 88fb is buggy, dev hsr_slave_1 17:49:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9df"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb3"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 1026.031555] device bridge_slave_1 left promiscuous mode [ 1026.037050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.080797] device bridge_slave_0 left promiscuous mode [ 1026.086309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.132979] device bridge_slave_1 left promiscuous mode [ 1026.138473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.180785] device bridge_slave_0 left promiscuous mode [ 1026.186278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.243554] device veth1_vlan left promiscuous mode [ 1026.248630] device veth0_vlan left promiscuous mode [ 1026.253991] device veth1_vlan left promiscuous mode [ 1026.259095] device veth0_vlan left promiscuous mode [ 1026.414636] device hsr_slave_1 left promiscuous mode [ 1026.454617] device hsr_slave_0 left promiscuous mode [ 1026.493802] team0 (unregistering): Port device team_slave_1 removed [ 1026.503013] team0 (unregistering): Port device team_slave_0 removed [ 1026.513052] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1026.563901] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1026.627497] bond0 (unregistering): Released all slaves [ 1026.752481] device hsr_slave_1 left promiscuous mode [ 1026.792935] device hsr_slave_0 left promiscuous mode [ 1026.834048] team0 (unregistering): Port device team_slave_1 removed [ 1026.844161] team0 (unregistering): Port device team_slave_0 removed [ 1026.853126] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1026.923028] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1026.989387] bond0 (unregistering): Released all slaves [ 1029.581480] IPVS: ftp: loaded support on port[0] = 21 [ 1030.352246] IPVS: ftp: loaded support on port[0] = 21 [ 1030.418028] chnl_net:caif_netlink_parms(): no params data found [ 1030.504251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.510835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.517725] device bridge_slave_0 entered promiscuous mode [ 1030.526064] chnl_net:caif_netlink_parms(): no params data found [ 1030.534071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.540587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.547501] device bridge_slave_1 entered promiscuous mode [ 1030.572787] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1030.582311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1030.613926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1030.621147] team0: Port device team_slave_0 added [ 1030.631681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.638098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.645770] device bridge_slave_0 entered promiscuous mode [ 1030.653307] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1030.660516] team0: Port device team_slave_1 added [ 1030.665590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.672354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.679236] device bridge_slave_1 entered promiscuous mode [ 1030.685582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1030.693482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1030.722210] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1030.782970] device hsr_slave_0 entered promiscuous mode [ 1030.820437] device hsr_slave_1 entered promiscuous mode [ 1030.861364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1030.869135] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1030.886752] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1030.893730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1030.901198] team0: Port device team_slave_0 added [ 1030.911931] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1030.919043] team0: Port device team_slave_1 added [ 1030.924915] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1030.936869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1031.012301] device hsr_slave_0 entered promiscuous mode [ 1031.050445] device hsr_slave_1 entered promiscuous mode [ 1031.123231] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1031.134455] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1031.156144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.162566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.169176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.175558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.226339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.232744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.239314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.245709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.276033] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1031.282755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.295001] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1031.306383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.314091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.321206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.328261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.335012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.344817] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1031.351308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.363356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.371397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.377743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.393436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.401260] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1031.408628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1031.416614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.423056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.434978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1031.443818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1031.454025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1031.461848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1031.469737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1031.477762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1031.485647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1031.494200] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1031.504287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1031.511258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.520186] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1031.526411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.533649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1031.544468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1031.553310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1031.564170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1031.571725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1031.579395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1031.589085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1031.596858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1031.604694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.612553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.620251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.626607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.633689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1031.641807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1031.649402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.655800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.665479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1031.675877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1031.683207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1031.691315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1031.698722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1031.708904] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1031.715729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1031.724176] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1031.735459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1031.747025] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1031.756916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1031.763440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1031.773407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1031.781300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1031.788763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1031.795569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1031.802647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1031.815555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.823533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1031.834988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1031.843538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1031.855717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1031.863345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1031.871583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1031.882624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1031.890792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1031.898269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1031.908160] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1031.914272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1031.930821] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1031.938765] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1031.945473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1031.953074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1031.966777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.979378] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1031.991240] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1031.998738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1032.006979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.068684] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1032.077007] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1032.084313] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1032.094801] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1032.104521] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1032.112482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1032.119844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.127600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1032.134733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1032.142142] device veth0_vlan entered promiscuous mode [ 1032.154564] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1032.163214] device veth1_vlan entered promiscuous mode [ 1032.169282] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1032.176312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1032.185680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1032.193759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.207947] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1032.231051] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1032.238082] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1032.246591] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1032.257566] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1032.264584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1032.274062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1032.281884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.289701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1032.297114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1032.306858] device veth0_vlan entered promiscuous mode [ 1032.324512] device veth1_vlan entered promiscuous mode [ 1032.330920] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1032.345787] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1032.420548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1032.427864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 17:49:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/25, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb3"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 1033.920151] protocol 88fb is buggy, dev hsr_slave_0 [ 1033.925300] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.240122] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.245253] protocol 88fb is buggy, dev hsr_slave_1 17:49:48 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/25, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 1034.502453] IPVS: ftp: loaded support on port[0] = 21 17:49:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:48 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 1035.573776] chnl_net:caif_netlink_parms(): no params data found [ 1035.618767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.625307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.632639] device bridge_slave_0 entered promiscuous mode [ 1035.639559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.646337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.653836] device bridge_slave_1 entered promiscuous mode [ 1035.669821] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1035.679296] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1035.703366] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1035.710765] team0: Port device team_slave_0 added [ 1035.716490] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1035.723810] team0: Port device team_slave_1 added [ 1035.729344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1035.737040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1035.802466] device hsr_slave_0 entered promiscuous mode [ 1035.840401] device hsr_slave_1 entered promiscuous mode [ 1035.884034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1035.891238] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1035.941654] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1035.972464] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1035.978565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.987180] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1036.000293] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1036.007286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1036.014615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1036.027327] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1036.033527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.042198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1036.049211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1036.057342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1036.065135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.071508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.086665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1036.093989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1036.101156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1036.108879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1036.116588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.122959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.143806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1036.151911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1036.162032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1036.179018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1036.188966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.199238] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1036.205999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1036.213707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1036.221918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1036.230955] device bridge_slave_1 left promiscuous mode [ 1036.236438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.281326] device bridge_slave_0 left promiscuous mode [ 1036.286823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.333090] device veth1_vlan left promiscuous mode [ 1036.338181] device veth0_vlan left promiscuous mode [ 1036.452083] device hsr_slave_1 left promiscuous mode [ 1036.504399] device hsr_slave_0 left promiscuous mode [ 1036.544520] team0 (unregistering): Port device team_slave_1 removed [ 1036.553957] team0 (unregistering): Port device team_slave_0 removed [ 1036.564662] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1036.604429] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1036.672783] bond0 (unregistering): Released all slaves [ 1036.728613] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1036.735612] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1036.746734] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1036.753594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1036.761087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1036.772093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.889580] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1036.905644] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1036.915425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1036.925306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1036.988122] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1037.001138] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1037.007933] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1037.022573] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1037.029167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1037.041280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1037.051331] device veth0_vlan entered promiscuous mode [ 1037.063989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1037.071672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1037.080925] device veth1_vlan entered promiscuous mode [ 1037.086914] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1037.102040] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1037.750739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1037.758042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1038.710430] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.715581] protocol 88fb is buggy, dev hsr_slave_1 [ 1038.720747] protocol 88fb is buggy, dev hsr_slave_0 [ 1038.725848] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.030158] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.035255] protocol 88fb is buggy, dev hsr_slave_1 17:49:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:53 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb3"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/21, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, 0x0) timer_getoverrun(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb3"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000540)="7608d8b1d42fa4595d65f067b6ba3045f07f1c91ce6530dfa789a4c1d6ec48431189318f2540f939acb0ac2010a905f1b90d75a1fdd61d637cff73818c64dba3aca7a1ef78b618d8401001ac51b6834326ae083e4792f28143a3907e17d68bc5084bfe44813d883f40681a3aa9f56276bd52881e2f41830cf5f42025e468b58fa16edd6f5fcad0de398ebfbca66b4959f8669855c4db0bdd8bef8fed36aa11f2d01d1e7a16fca48d265eb5b55e79273ac5a647a7a284ce163ae7b1ce0a3bf123b71b326efcf8c3558b758a978e43", &(0x7f0000000440)="f602f50078f1fd867e6405fcf01a8c6055d719a8665e755dbaf976fe3180afa9f199b450a79b2af354e67b68236ddc5771f7b0a4946841442ecc59c0960f3f310556cbcb2cda91461e6548c887f2963a1f58734f598ca7af112805562f9f675c74b8b433847d8a293d5a461ad60af3758cea017fa2889d86b7d5d907fe805734183ba1cb0af9abf298f10ce61f4f91b9dfb396"}}, 0x0) timer_getoverrun(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) bind$unix(r3, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x7, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x544194d6b5d09c42}}, 0xfffffffffffffd5c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="e94c482386d79fccffeb00"/23], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb108dd, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 17:49:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/28, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000"]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) 17:49:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x101000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/168, 0xa8}, 0x7}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(r2, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x3}, 0xfffffffffffffff2) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x0, 0xffff}}, 0x14}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="001000000000000005000000000000001701000000000000", @ANYRES32, @ANYBLOB="000000008d2600"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32, @ANYBLOB="00000000000000000100"/28, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c353c868c5ae36cfc8e3ff67aad15c7e9fc642382891187c10988e39c487479a6756a4eb10ca8560bf73cf5ede472df4abb627130ced3c2cf9a736baceb6698ed5293267354999f488d96f0ecb28a6cc9c8073abc4c87c1ded768a75c3691187610b7c8e", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000100"/25, @ANYRES32, @ANYBLOB="000035fcff9f6463bcf62797e1ba7632e720419f0000fbcd39bf00", @ANYRES32, @ANYBLOB="975dff0bbabd2e9cb865f3000000000400"/28]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x100000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x0, 0x353, &(0x7f0000000380)='&\x03\x00\x00\x00\x00\x00\x00\x00o0\x00'}, 0x30) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000003c0)) [ 1040.150135] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.155276] protocol 88fb is buggy, dev hsr_slave_1 [ 1288.150934] INFO: task kworker/u4:1:22 blocked for more than 140 seconds. [ 1288.157934] Not tainted 4.14.164-syzkaller #0 [ 1288.163355] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.172171] kworker/u4:1 D26384 22 2 0x80000000 [ 1288.177838] Workqueue: netns cleanup_net [ 1288.181937] Call Trace: [ 1288.184554] __schedule+0x7b8/0x1cd0 [ 1288.188261] ? __mutex_lock+0x737/0x1470 [ 1288.192519] ? firmware_map_remove+0x196/0x196 [ 1288.197097] schedule+0x92/0x1c0 [ 1288.200492] schedule_preempt_disabled+0x13/0x20 [ 1288.205240] __mutex_lock+0x73c/0x1470 [ 1288.209123] ? _rcu_barrier+0x2e6/0x410 [ 1288.213207] ? rtnl_lock+0x17/0x20 [ 1288.216757] ? check_preemption_disabled+0x20/0x250 [ 1288.221838] ? mutex_trylock+0x1c0/0x1c0 [ 1288.225894] ? debug_smp_processor_id+0x1c/0x20 [ 1288.230672] ? perf_trace_lock+0x109/0x500 [ 1288.234904] ? save_trace+0x290/0x290 [ 1288.238687] ? find_held_lock+0x35/0x130 [ 1288.242985] mutex_lock_nested+0x16/0x20 [ 1288.247046] ? mutex_lock_nested+0x16/0x20 [ 1288.251336] rtnl_lock+0x17/0x20 [ 1288.255455] ip6gre_exit_net+0x6f/0x5a0 [ 1288.259413] ? lock_downgrade+0x740/0x740 [ 1288.263600] ? ip6gre_tunnel_link+0xd0/0xd0 [ 1288.267921] ? ip6gre_tunnel_link+0xd0/0xd0 [ 1288.272301] ops_exit_list.isra.0+0xaa/0x150 [ 1288.276707] cleanup_net+0x3ba/0x870 [ 1288.280473] ? net_drop_ns+0x80/0x80 [ 1288.284183] ? __lock_is_held+0xb6/0x140 [ 1288.288222] ? check_preemption_disabled+0x3c/0x250 [ 1288.293304] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1288.298814] process_one_work+0x863/0x1600 [ 1288.303593] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1288.308261] worker_thread+0x5d9/0x1050 [ 1288.312294] kthread+0x319/0x430 [ 1288.315656] ? process_one_work+0x1600/0x1600 [ 1288.320210] ? kthread_create_on_node+0xd0/0xd0 [ 1288.324874] ret_from_fork+0x24/0x30 [ 1288.328805] INFO: task syz-executor.4:2145 blocked for more than 140 seconds. [ 1288.336172] Not tainted 4.14.164-syzkaller #0 [ 1288.341208] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.349173] syz-executor.4 D25712 2145 1918 0x00000004 [ 1288.354864] Call Trace: [ 1288.357452] __schedule+0x7b8/0x1cd0 [ 1288.361209] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1288.366314] ? firmware_map_remove+0x196/0x196 [ 1288.371082] ? autoremove_wake_function+0x160/0x160 [ 1288.376096] schedule+0x92/0x1c0 [ 1288.379451] _synchronize_rcu_expedited+0x6ca/0x8b0 [ 1288.384542] ? rcu_report_exp_cpu_mult+0xa0/0xa0 [ 1288.389302] ? sync_exp_work_done.part.0+0x10/0x10 [ 1288.394273] ? netif_reset_xps_queues+0x35/0x3c0 [ 1288.399041] ? finish_wait+0x260/0x260 [ 1288.403137] ? save_trace+0x290/0x290 [ 1288.406932] ? save_trace+0x290/0x290 [ 1288.410776] ? __lock_is_held+0xb6/0x140 [ 1288.414846] synchronize_rcu_expedited+0x35/0xb0 [ 1288.419649] synchronize_net+0x2f/0x50 [ 1288.423722] rollback_registered_many+0x82d/0xb60 [ 1288.428567] ? netdev_info+0xf0/0xf0 [ 1288.432862] ? kobject_put+0x6f/0x210 [ 1288.436751] ? batadv_interface_kill_vid+0xa0/0xa0 [ 1288.441730] unregister_netdevice_many.part.0+0x1b/0x1e0 [ 1288.447201] ? batadv_interface_kill_vid+0xa0/0xa0 [ 1288.452170] unregister_netdevice_many+0x3b/0x50 [ 1288.456932] rtnl_delete_link+0xcb/0x110 [ 1288.461096] ? rtnl_af_register+0xd0/0xd0 [ 1288.465256] rtnl_dellink+0x206/0x680 [ 1288.469104] ? rtnl_bridge_dellink+0x5c0/0x5c0 [ 1288.473739] ? lock_acquire+0x16f/0x430 [ 1288.478258] ? rtnetlink_rcv_msg+0x339/0xb70 [ 1288.482781] ? rtnl_bridge_dellink+0x5c0/0x5c0 [ 1288.487417] rtnetlink_rcv_msg+0x3da/0xb70 [ 1288.491698] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1288.496278] ? SOFTIRQ_verbose+0x10/0x10 [ 1288.500384] ? netlink_deliver_tap+0x93/0x8f0 [ 1288.504882] netlink_rcv_skb+0x14f/0x3c0 [ 1288.508926] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1288.513547] ? lock_downgrade+0x740/0x740 [ 1288.517688] ? netlink_ack+0x9a0/0x9a0 [ 1288.521611] ? netlink_deliver_tap+0xba/0x8f0 [ 1288.526105] rtnetlink_rcv+0x1d/0x30 [ 1288.529807] netlink_unicast+0x44d/0x650 [ 1288.533914] ? netlink_attachskb+0x6a0/0x6a0 [ 1288.538317] ? security_netlink_send+0x81/0xb0 [ 1288.542950] netlink_sendmsg+0x7c4/0xc60 [ 1288.547004] ? netlink_unicast+0x650/0x650 [ 1288.551284] ? security_socket_sendmsg+0x89/0xb0 [ 1288.556032] ? netlink_unicast+0x650/0x650 [ 1288.560844] sock_sendmsg+0xce/0x110 [ 1288.564566] ___sys_sendmsg+0x70a/0x840 [ 1288.568521] ? copy_msghdr_from_user+0x3f0/0x3f0 [ 1288.573310] ? __fget+0x210/0x370 [ 1288.576761] ? find_held_lock+0x35/0x130 [ 1288.580851] ? __fget+0x210/0x370 [ 1288.584307] ? lock_downgrade+0x740/0x740 [ 1288.588437] ? __fget+0x237/0x370 [ 1288.591938] ? __fget_light+0x172/0x1f0 [ 1288.595904] ? __fdget+0x1b/0x20 [ 1288.599250] ? sockfd_lookup_light+0xb4/0x160 [ 1288.603805] __sys_sendmsg+0xb9/0x140 [ 1288.607614] ? SyS_shutdown+0x170/0x170 [ 1288.611799] ? put_timespec64+0xb4/0x100 [ 1288.615929] ? SyS_clock_gettime+0xf8/0x180 [ 1288.620297] SyS_sendmsg+0x2d/0x50 [ 1288.623896] ? __sys_sendmsg+0x140/0x140 [ 1288.627941] do_syscall_64+0x1e8/0x640 [ 1288.632121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1288.636988] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.642275] RIP: 0033:0x45af49 [ 1288.645464] RSP: 002b:00007fafd4e6ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.653222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1288.660612] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 1288.668040] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.675348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fafd4e6f6d4 [ 1288.682649] R13: 00000000004caa0f R14: 00000000004e3eb0 R15: 00000000ffffffff [ 1288.689936] INFO: task syz-executor.1:2167 blocked for more than 140 seconds. [ 1288.698000] Not tainted 4.14.164-syzkaller #0 [ 1288.703120] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.711165] syz-executor.1 D28528 2167 1 0x00000004 [ 1288.716840] Call Trace: [ 1288.719444] __schedule+0x7b8/0x1cd0 [ 1288.723203] ? __mutex_lock+0x737/0x1470 [ 1288.727265] ? firmware_map_remove+0x196/0x196 [ 1288.731889] schedule+0x92/0x1c0 [ 1288.735249] schedule_preempt_disabled+0x13/0x20 [ 1288.739987] __mutex_lock+0x73c/0x1470 [ 1288.743915] ? debug_smp_processor_id+0x1c/0x20 [ 1288.748582] ? rtnetlink_rcv_msg+0x339/0xb70 [ 1288.753116] ? SOFTIRQ_verbose+0x10/0x10 [ 1288.757207] ? mutex_trylock+0x1c0/0x1c0 [ 1288.761309] ? rtnetlink_rcv_msg+0x304/0xb70 [ 1288.765715] ? lock_downgrade+0x740/0x740 [ 1288.769842] mutex_lock_nested+0x16/0x20 [ 1288.773934] ? mutex_lock_nested+0x16/0x20 [ 1288.778161] rtnetlink_rcv_msg+0x339/0xb70 [ 1288.782451] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1288.787029] ? SOFTIRQ_verbose+0x10/0x10 [ 1288.791129] ? netlink_deliver_tap+0x93/0x8f0 [ 1288.795622] netlink_rcv_skb+0x14f/0x3c0 [ 1288.799662] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1288.804297] ? lock_downgrade+0x740/0x740 [ 1288.808439] ? netlink_ack+0x9a0/0x9a0 [ 1288.812373] ? netlink_deliver_tap+0xba/0x8f0 [ 1288.816866] rtnetlink_rcv+0x1d/0x30 [ 1288.821175] netlink_unicast+0x44d/0x650 [ 1288.825233] ? netlink_attachskb+0x6a0/0x6a0 [ 1288.829620] ? security_netlink_send+0x81/0xb0 [ 1288.834229] netlink_sendmsg+0x7c4/0xc60 [ 1288.838287] ? netlink_unicast+0x650/0x650 [ 1288.842552] ? security_socket_sendmsg+0x89/0xb0 [ 1288.847299] ? netlink_unicast+0x650/0x650 [ 1288.851593] sock_sendmsg+0xce/0x110 [ 1288.855304] SYSC_sendto+0x206/0x310 [ 1288.858996] ? SYSC_connect+0x2d0/0x2d0 [ 1288.863015] ? SOFTIRQ_verbose+0x10/0x10 [ 1288.867126] ? task_work_run+0xf0/0x190 [ 1288.871192] ? find_held_lock+0x35/0x130 [ 1288.875258] ? trace_hardirqs_on_caller+0x400/0x590 [ 1288.880308] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1288.884806] ? task_work_run+0x155/0x190 [ 1288.888858] SyS_sendto+0x40/0x50 [ 1288.892354] ? SyS_getpeername+0x30/0x30 [ 1288.896414] do_syscall_64+0x1e8/0x640 [ 1288.900348] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1288.905193] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1288.910419] RIP: 0033:0x414c43 [ 1288.913599] RSP: 002b:00007fff1eff4c38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1288.921352] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 1288.928617] RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003 [ 1288.935918] RBP: 0000000000000000 R08: 00007fff1eff4c40 R09: 000000000000000c [ 1288.943236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.951295] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 1288.958622] INFO: task syz-executor.2:2169 blocked for more than 140 seconds. [ 1288.965972] Not tainted 4.14.164-syzkaller #0 [ 1288.971053] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1288.979134] syz-executor.2 D28528 2169 1 0x00000004 [ 1288.984843] Call Trace: [ 1288.987432] __schedule+0x7b8/0x1cd0 [ 1288.991191] ? __mutex_lock+0x737/0x1470 [ 1288.995319] ? firmware_map_remove+0x196/0x196 [ 1288.999920] schedule+0x92/0x1c0 [ 1289.003352] schedule_preempt_disabled+0x13/0x20 [ 1289.008106] __mutex_lock+0x73c/0x1470 [ 1289.012045] ? debug_smp_processor_id+0x1c/0x20 [ 1289.016750] ? rtnetlink_rcv_msg+0x339/0xb70 [ 1289.021214] ? SOFTIRQ_verbose+0x10/0x10 [ 1289.025274] ? mutex_trylock+0x1c0/0x1c0 [ 1289.029331] ? rtnetlink_rcv_msg+0x304/0xb70 [ 1289.034216] ? lock_downgrade+0x740/0x740 [ 1289.038356] mutex_lock_nested+0x16/0x20 [ 1289.042483] ? mutex_lock_nested+0x16/0x20 [ 1289.046713] rtnetlink_rcv_msg+0x339/0xb70 [ 1289.051001] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1289.055577] ? SOFTIRQ_verbose+0x10/0x10 [ 1289.059617] ? netlink_deliver_tap+0x93/0x8f0 [ 1289.064178] netlink_rcv_skb+0x14f/0x3c0 [ 1289.068230] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 1289.072849] ? lock_downgrade+0x740/0x740 [ 1289.076987] ? netlink_ack+0x9a0/0x9a0 [ 1289.081698] ? netlink_deliver_tap+0xba/0x8f0 [ 1289.086194] rtnetlink_rcv+0x1d/0x30 [ 1289.089885] netlink_unicast+0x44d/0x650 [ 1289.093991] ? netlink_attachskb+0x6a0/0x6a0 [ 1289.098391] ? security_netlink_send+0x81/0xb0 [ 1289.103021] netlink_sendmsg+0x7c4/0xc60 [ 1289.107075] ? netlink_unicast+0x650/0x650 [ 1289.111356] ? security_socket_sendmsg+0x89/0xb0 [ 1289.116104] ? netlink_unicast+0x650/0x650 [ 1289.120384] sock_sendmsg+0xce/0x110 [ 1289.124093] SYSC_sendto+0x206/0x310 [ 1289.127788] ? SYSC_connect+0x2d0/0x2d0 [ 1289.131821] ? SOFTIRQ_verbose+0x10/0x10 [ 1289.135879] ? task_work_run+0xf0/0x190 [ 1289.139837] ? find_held_lock+0x35/0x130 [ 1289.143965] ? trace_hardirqs_on_caller+0x400/0x590 [ 1289.148999] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1289.153528] ? task_work_run+0x155/0x190 [ 1289.157588] SyS_sendto+0x40/0x50 [ 1289.161363] ? SyS_getpeername+0x30/0x30 [ 1289.165435] do_syscall_64+0x1e8/0x640 [ 1289.169313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1289.174233] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1289.179424] RIP: 0033:0x414c43 [ 1289.182676] RSP: 002b:00007ffc09b41068 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1289.190436] RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43 [ 1289.197751] RDX: 0000000000000028 RSI: 0000000000a72250 RDI: 0000000000000003 [ 1289.205146] RBP: 0000000000000000 R08: 00007ffc09b41070 R09: 000000000000000c [ 1289.212894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.220207] R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003 [ 1289.227500] [ 1289.227500] Showing all locks held in the system: [ 1289.233894] 4 locks held by kworker/u4:1/22: [ 1289.238480] #0: ("%s""netns"){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 1289.247250] #1: (net_cleanup_work){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 1289.256422] #2: (net_mutex){+.+.}, at: [] cleanup_net+0x11c/0x870 [ 1289.264447] #3: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 [ 1289.272230] 3 locks held by kworker/0:1/24: [ 1289.276549] #0: ("%s"("ipv6_addrconf")){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 1289.286327] #1: ((addr_chk_work).work){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 1289.295823] #2: (rtnl_mutex){+.+.}, at: [] rtnl_lock+0x17/0x20 [ 1289.303623] 1 lock held by khungtaskd/1059: [ 1289.307936] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 1289.317033] 2 locks held by getty/7278: [ 1289.321059] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.329728] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1289.339207] 2 locks held by getty/7279: [ 1289.343232] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.352114] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1289.361489] 2 locks held by getty/7280: [ 1289.365450] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.381043] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1289.390391] 2 locks held by getty/7281: [ 1289.394353] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.403073] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1289.412408] 2 locks held by getty/7282: [ 1289.416380] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.425122] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1289.434468] 2 locks held by getty/7283: [ 1289.438424] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.447144] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1289.456611] 2 locks held by getty/7284: [ 1289.460644] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1289.469325] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1289.478668] 1 lock held by syz-executor.4/2145: [ 1289.483375] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x339/0xb70 [ 1289.492046] 1 lock held by syz-executor.1/2167: [ 1289.496722] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x339/0xb70 [ 1289.505380] 1 lock held by syz-executor.2/2169: [ 1289.510113] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x339/0xb70 [ 1289.518708] [ 1289.520372] ============================================= [ 1289.520372] [ 1289.527436] NMI backtrace for cpu 0 [ 1289.527446] CPU: 0 PID: 1059 Comm: khungtaskd Not tainted 4.14.164-syzkaller #0 [ 1289.527451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.527455] Call Trace: [ 1289.527469] dump_stack+0x142/0x197 [ 1289.527482] nmi_cpu_backtrace.cold+0x57/0x94 [ 1289.527577] ? irq_force_complete_move.cold+0x7d/0x7d [ 1289.527587] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 1289.569183] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1289.574417] watchdog+0x5e7/0xb90 [ 1289.577856] kthread+0x319/0x430 [ 1289.581204] ? hungtask_pm_notify+0x50/0x50 [ 1289.585504] ? kthread_create_on_node+0xd0/0xd0 [ 1289.590195] ret_from_fork+0x24/0x30 [ 1289.594050] Sending NMI from CPU 0 to CPUs 1: [ 1289.598614] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff866a5c9e [ 1289.599561] Kernel panic - not syncing: hung_task: blocked tasks [ 1289.611938] CPU: 0 PID: 1059 Comm: khungtaskd Not tainted 4.14.164-syzkaller #0 [ 1289.619362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.628731] Call Trace: [ 1289.631320] dump_stack+0x142/0x197 [ 1289.634935] panic+0x1f9/0x42d [ 1289.638127] ? add_taint.cold+0x16/0x16 [ 1289.643223] ? ___preempt_schedule+0x16/0x18 [ 1289.647664] watchdog+0x5f8/0xb90 [ 1289.651122] kthread+0x319/0x430 [ 1289.654474] ? hungtask_pm_notify+0x50/0x50 [ 1289.658790] ? kthread_create_on_node+0xd0/0xd0 [ 1289.663453] ret_from_fork+0x24/0x30 [ 1289.669071] Kernel Offset: disabled [ 1289.672727] Rebooting in 86400 seconds..