0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r3, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") semget$private(0x0, 0x1, 0x0) semop(0x0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2), 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 583.644521][ C1] net_ratelimit: 11 callbacks suppressed [ 583.644529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 583.644580][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 583.650245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 583.656038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 583.673204][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:09 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) [ 584.284591][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 584.290511][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:09 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 01:50:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 585.004531][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 585.010619][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:10 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 01:50:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) [ 585.724497][ C0] protocol 88fb is buggy, dev hsr_slave_0 01:50:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 01:50:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 01:50:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x2) 01:50:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 01:50:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c80) 01:50:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c81) 01:50:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:12 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5421) 01:50:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 01:50:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5450) 01:50:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x2) 01:50:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5451) 01:50:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 01:50:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c80) 01:50:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5452) 01:50:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c81) 01:50:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 01:50:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5460) 01:50:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") semget$private(0x0, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5421) 01:50:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e90"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x40049409) 01:50:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5450) 01:50:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4020940d) 01:50:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") semop(0x0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5451) 01:50:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc0045878) 01:50:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5452) [ 589.164541][ C1] net_ratelimit: 17 callbacks suppressed [ 589.164550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 589.176061][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc0045878) 01:50:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5460) 01:50:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc0189436) 01:50:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc020660b) 01:50:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x40049409) [ 589.884502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 589.884556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 589.890386][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 589.896110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 589.907592][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4020940d) 01:50:15 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc0045878) 01:50:15 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10080, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000891a, &(0x7f0000000140)="0a8aa0a700000000000100") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0xdffffffffffffffa, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x81, 0x3, 0x1ff, 0x3, 0x8, 0x7ff}) umount2(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000200)) getsockopt$ax25_int(r0, 0x101, 0xb, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 01:50:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc0045878) 01:50:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r0, r0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc0189436) 01:50:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 590.524482][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 590.530380][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) open(&(0x7f0000000000)='./file0\x00', 0xc0000, 0x4) 01:50:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) setgid(0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0xc020660b) 01:50:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffffffffff7f, 0x2040) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000040)={0xf, @capture={0x1000, 0x1, {0x10000, 0xffffffffffffff26}, 0xfff, 0x2}}) 01:50:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) [ 591.244490][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:50:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) setgid(0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, [], 0x14}, 0x9}, @in6={0xa, 0x4e22, 0x4, @remote, 0x8001}], 0x48) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a31658725"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x7fffd, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) recvfrom$unix(r0, &(0x7f0000000000)=""/170, 0xaa, 0x1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2480}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, r3, 0x400, 0xfffffffffffffffa, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000051}, 0x880) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4010, r2, 0x180000000) 01:50:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000300)="0adc1f023c123f3188a0700afa9e7d26bba866b8ce4cb86760abb42e2bb3319dedd7224e660fa4c01892508664ce864a81414683d628e373cd5d547c2c787e2051797d151b2fc2ce3bfc927e469e3f992765565ac8a80fcad809cccc4e1262cd6e32c7f4373d19704b4a1934c6446cacf943a56fee5d341c5c1a34bea331e07c0f2c") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendto$rose(r1, &(0x7f0000000040)="9eaa1bd54aa7e3d42cc36d73392bbec71bcb857920abafd7b0d2f5d3525958c48e1763c9e864cfb06c2caafef940d86fd8a8d05c6dcc5e1b0e52599e13e22757b31b6a9a8bb964156d6d7bced5100fc9632139526b0f3c2fd3514d61f4f219ad84ba5814378aede153158a01200ea957fddf13b0261509c96177c2b45c51f3ad78e796feded53e1e469322e63d0b1d50672da7fc17752b71df1b1793faf2a59d6498b45001b0f24c5fd5181983014488e9cef41561fc99060f7eef15c0b895eebc669241ce49d64103776417", 0xcc, 0x8000, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = msgget(0x2, 0x102) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000000)=""/53) 01:50:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x401, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000280)=[{{0x77359400}, 0x4, 0x2, 0xffffffff00000000}, {{0x0, 0x7530}, 0x5, 0x3, 0x54b}, {{0x0, 0x7530}, 0x11, 0x100000000, 0x7fff}, {{r1, r2/1000+30000}, 0x2, 0x9c, 0x7}, {{r3, r4/1000+30000}, 0x13, 0x2, 0x8000}, {{}, 0x1e, 0xfffffffffffffeff, 0x7fe}, {{}, 0x5, 0xfffffffffffffffd, 0x1}], 0xa8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x200000, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x800) setsockopt$inet6_tcp_int(r6, 0x6, 0x0, &(0x7f0000000100)=0x4, 0x4) 01:50:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_init_net_socket$x25(0x9, 0x5, 0x0) 01:50:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz0\x00', {0xe0b0357, 0x80000000, 0x401, 0x5}, 0x57, [0x5, 0x7, 0x4, 0x961, 0x400, 0x14d, 0xfffffffffffffff9, 0x100, 0xd84, 0xfffffffffffffff8, 0xdc50, 0x4, 0x7, 0x1, 0x8, 0x10001, 0x100, 0xffffffff, 0x1, 0xc909, 0x7fff, 0x1f, 0x4, 0x5, 0x8000, 0x302, 0x0, 0x2c, 0x3, 0x7, 0x6, 0x4fc1, 0x1, 0x1000, 0x119c, 0x5, 0xfff, 0xff, 0x1f, 0x6, 0x4, 0xf26, 0x7f, 0x1, 0xf57, 0x7ff, 0x8, 0x80, 0xff, 0x9, 0x1, 0x6, 0x7, 0x81, 0xffffffff, 0x6, 0x5, 0x1000, 0x80000001, 0xffffffff00000001, 0x0, 0x3, 0x2, 0x10001], [0x80000000, 0x1, 0x0, 0x4, 0x178, 0x7, 0x2, 0xfb, 0x50000000000, 0x9, 0x5, 0x1f, 0x7, 0x6, 0x800, 0xfffffffffffffa96, 0x7, 0x6, 0xe8, 0x6, 0x4, 0xfffffffffffffffb, 0x2, 0x6, 0x5, 0x7f, 0x8, 0xffffffff, 0x8, 0x6, 0x100000001, 0xffffffffffff6e56, 0x899, 0x0, 0x3, 0x7, 0xffffffff, 0x1, 0x81, 0x6, 0x3ff, 0x6, 0x2, 0x1, 0x7fff, 0x81, 0x401, 0xffffffffffffffc0, 0xfffffffffffffff9, 0x9, 0x36, 0x3, 0x3, 0x23c7, 0x8, 0x1, 0xfffffffffffffe00, 0x6, 0x0, 0x1, 0x5, 0x6, 0x5, 0x1], [0xde67, 0x9, 0x0, 0x2, 0x7897, 0x7, 0x0, 0x7fffffff, 0x7ff, 0x2000000000000000, 0x4, 0x3f, 0x0, 0x1ff, 0x2b, 0x0, 0x4, 0x2, 0x2, 0x623, 0xfffffffffffffff9, 0x2, 0x6, 0x9, 0x5, 0x7, 0x100000001, 0xbae, 0x8, 0x200, 0x5, 0x7ff, 0x0, 0x5, 0x9, 0x6, 0xfffffffffffeffff, 0xffff, 0x80000000, 0x3, 0x800, 0x6, 0xc44, 0x3, 0x0, 0x8, 0x5, 0x0, 0x401, 0x7, 0x3f, 0x0, 0x9, 0x800, 0xfff, 0x7, 0x400, 0x10000, 0x5, 0x7d86, 0x1, 0x1, 0x9, 0x43], [0x9, 0x1, 0xfb30, 0x3, 0x4, 0x8, 0x8001, 0x9, 0x8000, 0x7f, 0x3, 0x6d, 0x3, 0x1000, 0xffffffff, 0x101, 0x4, 0x7, 0x1, 0x9, 0x1, 0x200, 0xe5, 0x0, 0x8, 0xdad0, 0x1ff000, 0x1, 0x81d, 0x401, 0x4000000000, 0x7ff, 0x4, 0x6, 0xffff, 0x3d, 0x9, 0xc016, 0x8, 0x8001, 0x100000000, 0x10001, 0x2, 0x5, 0x4, 0x6, 0x8, 0xffe0000000000000, 0x9, 0x6, 0x3, 0x4, 0xfa01, 0xfff, 0x8, 0x1000, 0x0, 0x9, 0x1ff, 0x8e, 0x3, 0x7, 0x7fff, 0x401]}, 0x45c) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r2 = getpid() tgkill(r1, r2, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) write$P9_RREAD(r1, &(0x7f00000001c0)={0x84, 0x75, 0x1, {0x79, "3dc21317d0dd98f36900b7d89d3d4df35055351c1fb57bc1d679df35bc49e5c32de1e138f2dfe86ae96469293fc0e7f86c703041af6503f106c20be50cf2496f35fe8968bad6d9ade6150d6c9a10aa3e0369d8afb907928f123a00436beefb4493b803d0e4f5f43e024e3a2b94519f261e248865c2c554ca96"}}, 0x84) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) r5 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x23, 0x400000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r4, r5}}, 0x18) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000300)=""/4096) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/zero\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0xf49, 0x1}, &(0x7f0000002d00)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002d40)={r3, 0xfffffffffffffffa, 0x5, [0x4, 0x4, 0xffffffffffff0001, 0x8, 0x101]}, &(0x7f0000002d80)=0x12) 01:50:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400ac1, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x7, r1, 0xfffffffffffffffd}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = dup(r0) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22400, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) connect$x25(r2, &(0x7f0000000040)={0x9, @remote={[], 0x3}}, 0x12) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:19 executing program 0: r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="f0d07cbd0a300e365da1f4ff4e0899e1565fc3602d30de45ab1365683132c4828daacc948c104bd9c1c6a3b7895761585399a5ab364f774627586289a100f9d4cdaac66ca8e8b4f9843b304b6583bf44d24e6de89c2773b50dce15af8cc5138e741e253b13fcdfba7dd6b5b814391f66c1b5615afb6651256aac797acf66906770272b5fe0b07ea813b5ca9e584048bf4cf74fe93b839dadf1528d6d9a7f02db0387980ed64327e4fca74234c03b9cbee649eb1322eac92a034eab3f670f0cfc", 0xc0, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000440)='trusted\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="ec6c149a3f83bb18d5fb7237a3b6f67b1ed0513775842b7b96f46e320f673b84aa6d91262e4de214af5fc136d2", 0x2d, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000400)=[{&(0x7f0000000180)="6d6162bfca0554cf47bdf16834102f5f1836d69ccd632416ca9b42502c4e6babe08b3f76ac76c089486202e0858f2dfcbc4833cce450e104f774321cf1a2d50a421addb9c43234ba6a6c85c70e3627f16413d1964fa66073caaf127d23dee18e490ff5836224006beefc3279dca35acbf598fd40ab497c7e80f48707d27cd52b69fa971c6939fbf4d3609ab60d0826abacf5db6d069c5d1a47055866d35fc9fe2a9bf9ccbaaabadd7b46664a8bae9b6aa9ec1a62280b2929e621383bcafe9934fc2b65d761e2950131fb5343792abc6b26cd9b7cf034b1bf04cfec268976", 0xde}, {&(0x7f0000000280)="6fac231541d855e2bc5458bb0654c6dee03513a9a6852250722ad409e3369a34905ba56b0113", 0x26}, {&(0x7f0000000300)="b6ad41715a0767d61b389978eb6addb358011272139937c8efde2f5c765e170d06314c70e123aeb06f356aeb790ec373f7547facae5284220bf920afe6f1f3018edf4dd84be758ddaafcf893f8a5666293be5eb612de", 0x56}, {&(0x7f0000000380)="0adad3c827ed5b5e68d44167316ef4407c857ca704d94f4c56c6163818cba9089bfdb0764ef05f63cc802a0f2ecae370ce68292acb70916acbc44466c79fab44e306e8f3bddea8328845190add6393cd2b903d3864aa10d376956470620e607672c4815ec3ce915787b21026f29786cc65d036af40c89da33cf7", 0x7a}], 0x4, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x7f, 0x4, 0x7, 0x303c7661, 0x1, 0x9, 0x3, 0x1, 0x800, 0x800, 0x8, 0x3ff, 0x8, 0x6, 0x6, 0xffffffff], 0x0, 0x20040}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x800, 0x7, 0x2, 0x2, r2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x80000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:19 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) [ 594.684505][ C0] net_ratelimit: 17 callbacks suppressed [ 594.684513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 594.696026][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:20 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x240880, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:20 executing program 0: r0 = signalfd4(0xffffffffffffff9c, &(0x7f0000000000)={0x1e}, 0x8, 0x800) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/249, 0xf9}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000001300)=""/117, 0x75}], 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=@hopopts={0x0, 0x4, [], [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @pad1, @jumbo={0xc2, 0x4, 0x2bf}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x101}, @padn, @pad1]}, 0x30) 01:50:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) [ 595.404462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 595.410267][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)='%\xa7-*wlan1em0nodev\x00', 0x1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="024cf67ff72aaa65b616dbc83b847ca22512f64fbc901af5bb7554e9f257a3281b361ef1a5881394df654ee4dbe59a6fc25d2820f702f0815665f9bb7af9faef465007f7cc0169845086670b", 0x4c, 0x48000, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000280)={0x0, @speck128, 0x0, "18641add33342bdf"}) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r3 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r3, r2}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f0000000700)={&(0x7f00000001c0)={'sm3\x00'}}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x500, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@hyper}) 01:50:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 596.124530][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 596.125226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 596.130354][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 596.130470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 596.136293][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 596.141936][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:21 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f00000000c0)=0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008911, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x141400, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x565, 0x40}) 01:50:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = fcntl$dupfd(r1, 0x40000000406, r1) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000780)={@mcast1, 0x0}, &(0x7f00000007c0)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r0}) getresuid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000900)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000a00)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a40)=@flushpolicy={0x388, 0x1d, 0x0, 0x70bd25, 0x25dfdbfb, "", [@ipv4_hthresh={0x8, 0x3, {0x2, 0x13}}, @srcaddr={0x14, 0xd, @in6=@rand_addr="00a7c3ad8273897ce0e274798f338202"}, @coaddr={0x14, 0xe, @in=@rand_addr=0x9}, @algo_auth_trunc={0x12c, 0x14, {{'sha256-arm64-neon\x00'}, 0x6e8, 0x60, "e7e49429f30e1247a8f04cc15a99567dbbca3d4cbd18b3ff7a84ce3f2a9c45bb1cef9218465d847cbf133315be38c963ca56bbce3be1a4e1dffb06859b9171597bf84114def84a16ca99c7e6f6106327d175c42b1acb993ce8abf2d2cb7543516447c8663abd3ffe4c1db4c5593c30a04337f7d289e72c0908c76aafe397c076d188c8e6ca1a99e8af0bc609a1655bca0f85852359d8783892fc04f1c0c740121ba0aa8ae64312677062c9bc4400906055b0c15ee9cec11d8ca9b7fefdfde1988b37472a6b463dc9c2d074280b7c1a8684313298219e7a3780e6072b13"}}, @tmpl={0xc4, 0x5, [{{@in=@local, 0x4d2, 0x32}, 0xca8cd59a5757329f, @in=@multicast1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x61f, 0x101}, {{@in=@loopback, 0x4d5, 0x3c}, 0x0, @in6=@mcast2, 0x34ff, 0x2, 0x3, 0x8, 0xfffffffffffffffe, 0x10000, 0xc6a}, {{@in=@multicast2, 0x4d6, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x1, 0x60000000, 0x5, 0x100, 0x2}]}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@empty, 0x4e22, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0xaf, r3, r4}, {0x9, 0x8, 0xa5d4, 0x8, 0x5, 0x840, 0x0, 0x1}, {0x5, 0x0, 0x80000000, 0x3}, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@remote, 0x4e20, 0x7ff, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x2c, r5, r6}, {0x8000, 0x80000000000, 0x707, 0x15, 0xffff, 0x6, 0x9, 0x8}, {0x6, 0x8, 0x3, 0x9}, 0x3ff, 0x6e6bb7, 0x1, 0x0, 0x3, 0x3}}]}, 0x388}, 0x1, 0x0, 0x0, 0x1}, 0x4) 01:50:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 01:50:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x4, &(0x7f0000000500)}, 0x0) 01:50:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0xe6178c1fb7f00215) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0xb8, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) socket(0xb, 0x0, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x2, {0x1000, 0x4, "f11e108abe54983346b61fba87b7d547db61d145001c66afdc608a9db614d5d972e15d09292ab892d0cca3b5d1ce13365893ec1b9fc78e54c8dce5ba8824876f2f25bec1748fb3d07005e297f89d9f494df255720a9704e153288514bb2a6820c97f69d7b5feaa2f4da1f9404e582f90455ba287feb4322b6b5868e30720e5748648cc68a6e22938a5a2c2938444443ee0f5e79cea1a50e65179c656103a841614c4b31ac7e0b2e7fc5da6801846d94869fc85ee947d88a05313bb71916f8964ffad0f91fda8455ecf926c842f062a76c12d49c5e54d7d6bc31f1d8e76bf01d22dfa58548ec49c7cb708ccc072eef1d62ffb2fb0c4fd9fb8d85e77de48218546", 0x33, 0x3b14, 0x1, 0x4d, 0xc53, 0x8, 0x6, 0x1}, r1}}, 0x128) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000040)={0x8000, 0x101}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8, &(0x7f0000000500)}, 0x0) 01:50:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4400, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xffffffffffffc56f) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2), 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:23 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000000c0)={0x40, "82f78d8ff6f48191335bd88bb9fc25807248bbbeecb92cae7e6c93fca400c5e5", 0x0, 0x4, 0x80000001, 0xffffff, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0afe1f023c123f3188a070e5677e0404eb3b02569499692b61fba0ce676b9131e41f7340ced1652b39dcc7858e0c29bad1fb20d19e200f41a889f334347c4b5b8d55ffac8d7160d6f51b8a674d310fa51685a04cad1693f251a459f6e98f569b") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xa, &(0x7f0000000500)}, 0x0) 01:50:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={r4, r0, 0x6}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fffffff, 0x4000) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) 01:50:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xe, &(0x7f0000000500)}, 0x0) 01:50:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 01:50:24 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0xffffffffe00d5a0d}}, [0x1, 0x69e, 0x80000000, 0x800, 0x6, 0x3f, 0x7f, 0x0, 0x6, 0x5, 0xffff, 0x100000000, 0x50, 0xfffffffffffffffa, 0xfff]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0x8c}, 0x8) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000340)={0x5, 0x7fff, 0x1, 0x200}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$TIOCNOTTY(r0, 0x5422) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @null, @bpq0='bpq0\x00', 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x100, 0x0) syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x0, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x11, &(0x7f0000000500)}, 0x0) 01:50:24 executing program 2: r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000000280)='net/bnep\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000002c0)={'broute\x00'}, &(0x7f0000000340)=0x78) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x10) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000240)={0x5, 0x74}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x5, 0x4}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r4, 0x997, 0x2, [0x6, 0x1200000000000]}, 0xc) 01:50:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x18, &(0x7f0000000500)}, 0x0) 01:50:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x10000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r2, 0xc00, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x861}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x515}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x60, &(0x7f0000000500)}, 0x0) 01:50:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xc0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000300)={{0x3, 0x3, 0xa5, 0x400, 'syz1\x00', 0x1be2}, 0x1, [0x8, 0x7, 0x2, 0x69d, 0x400, 0x503, 0xe8, 0x0, 0x60, 0x3ff, 0xfffffffffffffff7, 0x0, 0x74, 0x1f, 0x4, 0x3, 0xdb39, 0x80000001, 0xe02, 0x9, 0x1, 0x5, 0x8, 0x4, 0x69b50b40, 0xb29e, 0x9, 0x9, 0x80, 0x800, 0x8, 0x110, 0xffffffff, 0x2, 0x6, 0x401, 0x0, 0x6, 0x4742, 0x80000000, 0x8a, 0xffffffff, 0x7, 0x1ff, 0x6, 0x1, 0xfffffffffffffffc, 0x80, 0x7ff, 0x9, 0x3, 0xffffffffffffffe0, 0x0, 0x8919, 0x1, 0x2, 0x3fa4, 0x5, 0x1f6f, 0x6, 0x4, 0x0, 0xbc, 0x4, 0x9, 0x7, 0xbd, 0x4, 0x6, 0x3ff, 0x0, 0x9, 0xebef, 0x5, 0x7f, 0x2, 0x6, 0x6, 0x1, 0x1f, 0x491, 0xd91, 0x2, 0x65f49605, 0x1000, 0x8e87, 0x80, 0xfff, 0x824, 0x6, 0x1, 0x101, 0x4, 0x5, 0x0, 0x8001, 0xffffffffffffff7f, 0x7, 0x8, 0x3, 0x947c, 0xfffffffffffffffa, 0x9, 0x3ff, 0x9, 0x3, 0x80000001, 0x3, 0x5, 0x6, 0x7, 0x9, 0x7, 0x100, 0x7ff, 0x7fff, 0x7, 0x7ff, 0x2, 0x91, 0x0, 0x1, 0x6, 0x1, 0x7f, 0x80000001, 0x375, 0x2], {r2, r3+10000000}}) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000280)=0x8a, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = dup2(r0, r0) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0x2) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) signalfd(r0, &(0x7f00000001c0)={0x9}, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) fsetxattr$security_ima(r1, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v2={0x7, 0x3, 0x6, 0x2, 0xc, "5220b9d7def79c5672d70e4a"}, 0x16, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000180)) 01:50:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = semget$private(0x0, 0x0, 0x1) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x400000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x8, 0x800}], 0x1, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x543, &(0x7f0000000500)}, 0x0) 01:50:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x5c4, &(0x7f0000000500)}, 0x0) 01:50:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0xfffffffffffffffb, 0x9, 0x8, 0x100000001}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="00010000100000000400000071d5c0580400000000000000"]) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x901}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r4, 0x816c66d}, &(0x7f00000001c0)=0x8) ioctl$VT_ACTIVATE(r3, 0x5606, 0x1000000000) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 600.284484][ C1] net_ratelimit: 14 callbacks suppressed [ 600.284493][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 600.284551][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 600.290269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 600.295986][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 600.313256][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 600.319082][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xec2b, &(0x7f00000000c0)="0adcb93458ffff6c4ccb7eca337a135a52") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x5c8, &(0x7f0000000500)}, 0x0) 01:50:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x282000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdfd81662917abefdef4c6a1634092d08000200080000000800010000000200000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x222000) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x4e20, @rand_addr=0x10000}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) 01:50:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x608, &(0x7f0000000500)}, 0x0) 01:50:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x8000) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0x0, 0x6, {{0x695, 0x8, 0xfffffffffffffffd, 0x5, 0xffffffff, 0x89, 0x400, 0x8}}}, 0x60) 01:50:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x88010, r2, 0x2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x2, 0x5, 0xff, 0x2d7, 0x1ff, 0x3f}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) [ 600.924514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 600.930377][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 01:50:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="c7000000e1ffffffefc9039d8cf19303cec9ac82f9757c94370d0259d7b666833b5718f2f1f15346297e0db481576eaecb13418ed4987641098b0e007b4e1e74f03e528b858a92d752a105de9b4ea4366c8f9776e603642d1e65d67538704b3f90b40369d710f061e1bc49b062d13be0d6d7d16acc490f02e941c57e3680be8162a623a5094930e2b916d2d054609a1c084141812a0c3b4212e61ee02c11108d652fa858f21539ca78ebc742576bbaf15c2fe3a522449749c906e0971460837ae1aea4655034b3"], 0x208000) readahead(0xffffffffffffffff, 0x0, 0x9) 01:50:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x689, &(0x7f0000000500)}, 0x0) 01:50:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) sched_getattr(r3, &(0x7f0000000100), 0x30, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r2 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) [ 601.645998][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 601.652861][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x280000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x80800) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r4 = socket$inet6(0xa, 0x803, 0x2000000007) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x9) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 01:50:26 executing program 2: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 01:50:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x806, &(0x7f0000000500)}, 0x0) 01:50:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 01:50:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, 0x0) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000380)=0xfffffffffffffea4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000200)={0x0, {0x46, 0x5}}) acct(&(0x7f0000000000)='./file0\x00') 01:50:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x321042, 0x0) getsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x6002, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xa00, &(0x7f0000000500)}, 0x0) 01:50:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 01:50:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x0, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0xfffffffffffffffd, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x1, "f93253b95da11e00"}) getrlimit(0x0, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x0, 0x8749}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 602.627618][T25266] Unknown ioctl 35304 01:50:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 602.655371][T25266] Unknown ioctl 1074310947 01:50:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xe00, &(0x7f0000000500)}, 0x0) [ 602.715498][T25270] Unknown ioctl 35304 01:50:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x44) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000001c0)={0xcf7f, 0x7, "02c2321025b0054399169c98f27c4a63ac9e5140a2df1338d82416588bc9c129", 0xff, 0x2c, 0xfffffffffffffff9, 0xb563, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x90000, 0x8008, 0xffffffff7fffffff, 0x8, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x3, 0xffffffffffffff7f, 0x8, 0x5f, 0xfffffffffffffffc, 0x8, 0xffffffff, 0x3, r4}, 0x20) 01:50:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") semget$private(0x0, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:28 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f00000007c0)={'e0z'}, &(0x7f00000003c0)='fu\xb3\xa9{Q\x02sePG4+\x88\'\x99(\xd4FG\xf1\\\xea\xbb\x81U\x04=\xb38\x81|\xaa\t\xdd*\xc0\xc9a{\xf5h1\x1dF07m\x86\xcaH\x13>4\xc3\x1c\x00\xc7\xe2\rp\x92\xfa1]\x15,NI\xb0\xb1\xcd\x8c\x84\xfaO\x93[\xb7\xbeSY\x01\x05\x1aZg\xdc\xa3\xa3s1f\x18\x17:\xb2\xe4\x95\xc0\x9c\xce\aUS\x1e\xe8\xddw\xdb\xb0\xaa]|\xd56zd\xb9\r\xef\x9fzy9\x13n\x04\xc5\xef3\x15\xdbYm\x85\x1dwU\xbe\xaf\xc3Y\x90y\xe1e\xa3\xba\x1bP`Rm\x04B\x7f\xdf\x92\xb8\xf5B\xe3X\x1bw\'\xe4?\nC\xc3\x1f\xa3\xe3\x01\xc5\xfc\x9d\x8eo\x18\xf3\xc6\xc7\xa8\xc8\xe7\x7fWK\xb0\xa4\xed\x84\xcb\xb2\xa8\x1b {\xfc\xdc%\xc4\x8e\xc8;\x93\xdd\na\x11\x13O\x85', 0xfffffffffffffffe) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x20, 0xfffffffffffffffe, 0x94, 0x0, 0x6, 0x9, 0x7f, {0x0, @in6={{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x4c36, 0x8, 0x80, 0x8, 0x2}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r2, 0x3}, &(0x7f0000000280)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f31a8a07050561dc7f50ed4d204dc2032e0ead8995fb9fd00827b8903bad924fe6652cab2d07a086471a207b570c4da2abd53d007c534d56ccc6167459df92c44fb9fb765e0699308df4a57de437dc461ec6fcf3debe00c0857b13de578cdd051e1f182fcd3a910cf009bbcabc7d7844555ae81e83e8f1e418357d463f33ef6a85c76c774dd73581aefe3af4dc090c02393cadeec3cdbf9b74cf0b84cf7a1a47857aefecb7dd180244afcc8f0") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101100, 0x0) ioctl$TIOCEXCL(r4, 0x540c) r5 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) fsetxattr$system_posix_acl(r4, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x7}, [{0x2, 0x1, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}, {0x2, 0x3, r8}, {0x2, 0x2, r9}], {0x4, 0x1}, [{0x8, 0x1, r10}], {0x10, 0x4}, {0x20, 0x6}}, 0x54, 0x2) 01:50:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x1100, &(0x7f0000000500)}, 0x0) 01:50:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffb) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000080)) 01:50:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(0x0, 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x4, 0x3, 0x4}}, 0x14) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0x9, 0x6}) write$P9_RMKNOD(r1, &(0x7f0000000300)={0x14, 0x13, 0x2, {0x60, 0x4, 0x6}}, 0x14) ioctl(r0, 0x1000008915, &(0x7f0000000140)="0e3c6204c3ac8e21ed27b462710f693eac3651a4c4f5d4b46b2381f052fb2614fc6d4d08db626bfd8b3db8f97ec6f962b104f4b2067001d02f") getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@remote}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 01:50:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") semget$private(0x0, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast1, @broadcast, @broadcast}, &(0x7f0000000040)=0xc) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc0b023c123f73a6a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x4a15e7e7, &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x1800, &(0x7f0000000500)}, 0x0) 01:50:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:29 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x695) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 01:50:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x0) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x5c, "d0fc15b51bc31381b5ee46a54d71dc80432d9a3e92a36400b8b2af316d1a40512d7f496a9c49e1ec87bcc495cfd280a55f148b54ce65e1a8ec54fbd2dc785c348a7845a78072978d7e6326cd2afe743c364f8b9ce56fd256508702c8"}, &(0x7f00000000c0)=0x64) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x81}, 0x8) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:29 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x2, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair(0x2, 0x3, 0x3, &(0x7f0000000100)) 01:50:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x3580, &(0x7f0000000500)}, 0x0) 01:50:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e90"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:29 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) fcntl$setflags(r1, 0x2, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 01:50:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x3f00, &(0x7f0000000500)}, 0x0) 01:50:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x240, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000001b00)='/dev/dmmidi#\x00', 0xffffffffffff2a35, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b80)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, r2, 0xa00, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x20040015) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = getpgrp(0x0) process_vm_readv(r3, &(0x7f0000001780)=[{&(0x7f0000000040)=""/219, 0xdb}, {&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/243, 0xf3}, {&(0x7f00000014c0)=""/96, 0x60}, {&(0x7f0000001540)=""/99, 0x63}, {&(0x7f00000015c0)=""/88, 0x58}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/135, 0x87}], 0xa, &(0x7f0000001900)=[{&(0x7f0000000280)}, {&(0x7f0000001840)=""/145, 0x91}], 0x2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1c5) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001940)=ANY=[@ANYRES32=0x0, @ANYBLOB="fd00000031e249cbb3f5bca4783682b99f8490913b9405c3abc1ca2e061e9af22ad1d4ba4c8d5bba5755854776836ba1305f4f35b43f526f4ff8f354158c773f575f7c68d67ddca77d6b67cd97c8471bee6b028bf36302a5b9bfdffb0d2c0178195924f3032341e968ed36596406bc92fa425e2993b3af54ee41b3bd81ab205bcada10ead3df303c42323656038f417207a2b413260284954b1202af657f1b1a72a85326ecfc5bc6a43ecd2c1053ca8f1b0bd0f5e46113e66ecbc4120a1b2aa09af642319defceebaad29a72cc63c3bd99576a87c9f9317b292ccdb214920d3e3675a064434738a2d4177e1dc41f9da6029a728a691555f833df51aa7e4f2e8a4b"], &(0x7f0000001a80)=0x105) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e22, @multicast2}}) poll(&(0x7f0000001ac0)=[{r4, 0x4001}, {r5, 0x8}, {r4, 0x400}, {r5, 0xc207}], 0x4, 0x8) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 01:50:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x4305, &(0x7f0000000500)}, 0x0) 01:50:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0ad800405a0c00000002702a5b90d6d1f8ec7e552077f1034d97f315665d91bffb4b20e442eba78e1f4d6a21d85eaa3181605cb7edad56812a897a5a2a52b1e5ead469d44539af5fd2eedf9cfb46f918082caab4358a9a156964a471ae37c8c136b3b68d136f71819900c1") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 01:50:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x3, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="9d0000009652c8a46382244dd32f80b62a9a907423a7877ba7c2ac22c614b3d3c9331b91bb1576c13eca30788e7fe8b625003c804f8d2f677cc4e28342abbe375af935baaf408b104c0ddcb01bf400eee3622a00549cd231233e935887170326abe3090000000000000076b2af208ca82ca8d9a9e476044d92ad9a2db6d367d01ff1b60cb94ce5ed3612ba1e1e4b573cdb1aacd3"], &(0x7f00000000c0)=0xa5) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x11f12706, 0x10}, 0xc) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x4788, &(0x7f0000000500)}, 0x0) 01:50:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x400002, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) fcntl$setstatus(r0, 0x4, 0x4000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'vcan0\x00', 0xf012}) sendmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x0, 0x8, 0xba, 0x2}, 0x8, 0x3, 0x0, 0x0, "7da7f09294e78575"}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x4001) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x12) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:50:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sync_file_range(r1, 0x1, 0x4, 0x2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getresuid(&(0x7f0000000040), &(0x7f0000000280)=0x0, &(0x7f0000000300)) mount$9p_tcp(&(0x7f0000000440)='127.0.0.1\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x4, &(0x7f0000000500)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@debug={'debug', 0x3d, 0xb8}}], [{@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x3f, 0x35, 0x30, 0x76, 0x65, 0x75, 0x64], 0x2d, [0x61, 0x64, 0x0, 0x32], 0x2d, [0x71, 0x39, 0x76, 0x3f], 0x2d, [0x65, 0x31, 0x33, 0x34], 0x2d, [0x0, 0x30, 0x38, 0x77, 0x64, 0x0, 0x3f, 0x75]}}}, {@euid_eq={'euid', 0x3d, r2}}]}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000340)) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000005c0)={0xfffffffffffffffb, 0x10001, 0xffffffff}) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@ng={0x4, 0xf}, 0x2, 0x0) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f00000001c0)=""/1, &(0x7f0000000200)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0xffffffffffffff13) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x8}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r5, 0x9}, 0x8) 01:50:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x28c, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100000001, @local, 0x7}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffffffffffc, @mcast1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x9}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd579}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x35}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x200048c5}, 0x40000) 01:50:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x4888, &(0x7f0000000500)}, 0x0) 01:50:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003580)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000035c0)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) pause() sendmmsg$nfc_llcp(r0, &(0x7f0000003400)=[{&(0x7f0000000080)={0x27, 0x1, 0x1, 0x2, 0x6, 0xf0, "51242f66e201f83f412cdab56dc777289aefc7d06da487c0e8c1725f64a246d8ce7fbd98095c78790e24efd409bac25cda73d92e00ebf441c1e93991f5996f", 0x21}, 0x60, &(0x7f00000014c0)=[{&(0x7f0000000180)="dd736096cea7161c87349650e29a2f0971632cc16c907dcba3fcc97b391bde9d5b9b0e704ff586b6cc745a7f3c17b0bf518ee6d31888d85a271c26dc4a4fc605e45d592ae15f1f087a35dd81c0c4c1da09c317068a8a7a3af3b1fe61afab050bc3ff269d2a306e651f161d17b18e2cd058b11b6283d7836d73e17faf82223265646afa4e5805fca0d3613ee785399526afcc01923e131fb3985b2b2c4d363f78", 0xa0}, {&(0x7f0000000000)="c085c650894a9940d838793ec86405d6fc8e6ad016f15189d5b953f83dc300", 0x1f}, {&(0x7f0000000240)="588d3acf9a141d4a39532263ec913c267fead51fdf0f5bb105947be9f671dabd9cb1c38319d38be265611b872e61cc86502fafd41f41dbd53a2aecd43fdf767400ccfbbd3fe6e5dff23044fd38aab5ab0890fd27d82a0e351297556d4a4e4ee1eecf9cdf13869f1df6fb394fa507f21e8b0da75d902767abfb713a", 0x7b}, {&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000003c0)="66f8ba0d9352d2e950e48d67d45f2f1cf795c3f332dfa81742c49f301071e2d3f7c4c2d9c60656abe790732601ac99b48ec96a51745c543e7ad6ed8032d95ae8797c9629effd93b29865fbd6e21119b153c2f3e1c7aecad66494a69d14e7ff6c58013e9c88bdf8ff9fdfe0971c3c0878f4505e948ef988d7c5a2bef83a5660f67630a863e7033ef38b58536e3908cb903352717d71fcdaf8e4d723c061079709c1ec3870ebdca6ef64fd25c4b2746c83683d95e7b6c249bf3d164692624c18830d0dbe621638fb342bad3311592bf12e5892fecbf62c6f4342f78291182c443e8a", 0xe1}, {&(0x7f00000004c0)="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", 0x1000}], 0x6, &(0x7f0000001540)={0x1010, 0x10e, 0x1, "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"}, 0x1010, 0x20000000}, {&(0x7f0000002580)={0x27, 0x0, 0x2, 0x0, 0x80000001, 0x4, "e5c3de7cef666378a146b640135f9d3e47c3d968aad2889a2dc8416e942c2daf29c90e6f44ed1a7d87b76d91ed4d92b3cfaa789dc2a44e0dbe7e65d0d03836", 0x35}, 0x60, &(0x7f0000000100)=[{&(0x7f0000002600)="0d19f2d1b9aa05fe39b706b0c7e8dfed5dc353264daf502bcdb2bf4e4d4b73e988382d9a681a0300ebb67ae95ffd64e5c3592cdb42cdfef4ed83d20f39f70c7c89c75a997b841445833c4018d2e5299b9a5f975a54ad25ed2f206f5f0ec03e2a2c7a3753f8bf1ae321119ddeb324e65d724f7adbd52e8252ed3f4fde3c40b60a5c50446470631e4f", 0x88}, {&(0x7f00000026c0)="f5fbe26ebf033854a2120cd38c00e07fa5ded38dc85e0323d2b5a4b48d436afafb4a969de69b96b1ec38e2a1444026e059c6f16b3ab9f0e8c745f57fb5e2ad3a71d6a650b525caa144e743c0d5746551f4fe473018b5c0b9c5b21f35661e7a1143e5fe6249d5c1d9c06ed5e6788a989d79fd86482f12a2bd4f70589669990a53e6ac803f1701fa211217712dc8e562ab3964376658b56d23f3ac1d207ac70e102773bb9b1cfc8cc1f0657b022993c7", 0xaf}], 0x2, &(0x7f0000002780)={0x18, 0x111, 0x7fffffff, "0455e3213fd3"}, 0x18}, {&(0x7f00000027c0)={0x27, 0x0, 0x0, 0x3, 0x5, 0xd6, "1aba31b11950d7cd29bf04ed7fc9ad080b1aaf57b30232e3e56c1fb22cac75321e63fdf49f491b06911f1569e2df78599971ec2683bcb84cde9d857b50480b", 0x11}, 0x60, &(0x7f0000002940)=[{&(0x7f0000002840)="4649b3cecb737846f5c27d2b3423dab15bd87a2ebdbc1c9c86ac3b357546167613742ba77e33dc77bd8d8b89bef646fb0e7e36bb813f04e96ead83ebfbdc9ff2f892c98663a353084129aa8ca21a51e5452a523d2c9b75cbcdc8c33a561c75e68870b75e4dc7f5571559bf505e340730903534d39200a8c6499951a2d6e72fe90cfb2ba5fa7209ade9d953a435257bc6556ccc9e85fbec1ed4f168fc5387d8953140e4feb7c8e0650635536484cbf10693dc91f9119697fbce1ce4be1f36c90bb9d8aff54546cc53e7cc1a3453d7b8df39ee4d7c2d92cc64478b9a800127d1693f2eec24b8f2bbe5bd9770235d608acd602d3cc70914f3f8", 0xf8}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000002980)={0x27, 0x1, 0x1, 0x7, 0x8, 0x54, "abae86111a003914bae5c7186de0ea1c9e54c5a02325086f0e153d3614cb609f985d4af7277ab45d09484a9d080d406327a0891f0aecf4dd6024493ee9ba2e", 0x1d}, 0x60, &(0x7f0000002ac0)=[{&(0x7f0000002a00)="675465b4950db8b90bfe2320fa465daf03edc0f95a41021133a96d8284337c04aab668800f4c70d83c05a9fb4fe129074448ca87a947298aadb01364ce6a53e7b50e8edc2362c093bd20e2e918ed653ececada86194cc5924cb154b1cd40c9606a4c051ec1c802df9afed71be14c6a9062425814d83295367c6b805dc9b6ca037b968596347ee710022dd5bf224f2bf704061f7f77163ddcaceeb6987260e502418fe98f1816862d3b", 0xa9}], 0x1, 0x0, 0x0, 0x20044015}, {&(0x7f0000002b00)={0x27, 0x0, 0x0, 0x1, 0x1, 0x0, "38a5e5e5b58c08e7e867aeaf233b4f1d58e53ce87ca2cbfc6839393f650b066c8c1f6f8265539fc2a8d39c9034ac385996b00998b65040cdae00c504da12f0", 0x30}, 0x60, &(0x7f00000030c0)=[{&(0x7f0000002b80)="8b7aab4d84e3fff9582eb8ecb93fb5bb0993241503fa474c782ffe3bc5d544cc5b4d8af43136ea43db93f63eb60c96ee5c80db579f5db8dd09a3a953a0773b2d3326df34466aaafa997d418ae6a1d2c90831969e70639fe90e840ad3478746dd9a0f2c32687c67bbb243c0ec2a683cc5f09a6b76fe31d26ee8975f16a32006f4d8690d54d3db9b09ceb382922a6b727b99", 0x91}, {&(0x7f0000002c40)="73d635bdf646", 0x6}, {&(0x7f0000002c80)="acfc2e21f4d85a367bbfab3f4f050d", 0xf}, {&(0x7f0000002cc0)="3cac248a20b9f5d4f260fc325eb9529e7ca8e9e8aed2a391992fb3", 0x1b}, {&(0x7f0000002d00)="d0f0fc5ba7b96ab68000fe613bf5612cdc849e95a36d8007bfb199394f188a507777d1b963510544e3071dc12399f064fab3761832e5c52e8f1f489ef2a71a075ab702c7a0460bed1c414af07fa96c49c388ff5812a165782b9ad16c821cf21925f98e0b4407b856be64d29e5359952ffab5fe43c13571645717c4db2cc4a499fe263e1af31f3975497cdda30700c5be62a67d8071b1a5ebe03cdcefb87f5ab4708e8a256597d57a9107156cc6a78f577d4ff1d37f768ed9bfc48f8fcb817703095ed5beb3f027a098", 0xc9}, {&(0x7f0000002e00)="226450d2f3ccdcc89f5b1ecf76b5d0bcce623c2a7a3d5e717a08b08ccbb23c16bfadcfc3e69597d332babe9fa105d71f36bb54aee54aa383c8695fc510803e87e54bb743aed2328b4537d1803dae3b9f669bad171431258e22bfb4ecda462165581d2e77fa5736144f83c5d90f739b10f2f1c7d6eee7b7a02f9465f96734052e547fb002f0c266b2ebdc952946017d326d227469b1fcc13fbd1da7d1054a0953d2d5bbb5c1f9951e40f13f11ec6f6e6a55a39963ddfa7a021ed3", 0xba}, {&(0x7f0000002ec0)="56e746edc410465e8fb1b9c641a31d7543d40b5bf3b904741db011a486b59f322cb40beef3452ff83dead7af59c80c65d5e3a862045e9bee6cab72afd615ec919ccd32391f21ee3e3792fb9ee837914b920766fcad4bf2a5bdd50d5e3ecb826e60c354c7a1a9c37157d86e9dac712cf4866480d6acd737ffab85313fa9b9ef710fee6f7e4c5f75b5da220d911d3c3b601a4ef10a787623b52a6c6ee94baba7b6fba582fa45ab5a14425219667df630ab8585706b6539c09237045b9f703dbaae01d4974251aa19756b90a089de67098b0064b874374880f2ec1d0d6b559315294462b928ce4e50ed", 0xe8}, {&(0x7f0000002fc0)="ad3e2466839f84596c5c25332c93b3f96f4535231909309103450894165312ade7e402b45c31f5daed07cb6bfd615752ffd22fbf5fbf3353b4c73c7d8c7376c2b20affe03a04983627e00c6a2987492fdf67af877137743601f7335850ecb06da7203b6d", 0x64}, {&(0x7f0000003040)="faf6deb81f147d51861ad75e810e28350f66c16bad98223e46bf0329acbe4a507bd421551a52fb7c3d057326033309f32b2765035586f17e04a7ce8278b4009fbaf0f64f69d48a98d6feb8bed5a948d471565a4b6aef92f20bca071a215d86b773e43670259772b3cc221609c1e2e79b451d3a291f5529", 0x77}], 0x9, 0x0, 0x0, 0x4000010}, {&(0x7f0000003180)={0x27, 0x1, 0x2, 0x7, 0xfffffffffffffff8, 0x0, "c465e4c955d6e6638112deb524622afeada405dc769ad3208a62a8037d351e4597b41a2383cb1bf67ccdf442424cdd69e9615f49599d09bc2e6314422e94fb", 0x21}, 0x60, &(0x7f0000003300)=[{&(0x7f0000003200)="e059db052a44576a0ce396ce64bfa589201f799cf6dfa1c9da9b5a1152cbeecf41cd5c23c3ea9c65be072417aec63618c7bdf5d3", 0x34}, {&(0x7f0000003240)="910220c6e0cb4833e2cd74a35cd873563e6f19504e583cd32c96ce7f8bd816b2552f8600f1c231632ddbbdba14158233d9d911e5", 0x34}, {&(0x7f0000003280)="8637be364a0967b1afd11ea14cf027c59f50499589888121da7e158efae17c6fe150789443fd48466771f2f57129cadb5b4ae0cf4d81eeaff4a056b30cb46a86267f7646240391d7bb92c27a4f3021bf9361adefe48bcc69e8de0f0030faa5d42c44321a92d5", 0x66}], 0x3, &(0x7f0000003340)={0x88, 0x0, 0xff, "baf0cd466b4c5c742de491610d6e7d20a956696a4d19d381a21efca84b718097c1aa25b923961b6fc57a1e3e0bb2607204c05fa4ae9dc3c63216c26117b915ce564393a62770a50fe32f71656579d6b34481b954b8c58a6c8a722279051936eaf67d5493f836e9583f9d5354420be6edcc54dd"}, 0x88, 0x4000}], 0x6, 0x4000) 01:50:30 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 605.814494][ C1] net_ratelimit: 18 callbacks suppressed [ 605.814502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 605.825982][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x5865, &(0x7f0000000500)}, 0x0) 01:50:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070b1f0e5dcc7c52dc0a2e6188f989cb87bcf9bec423b193252") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000300)) 01:50:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:31 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000100)=0x7f, 0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x6000, &(0x7f0000000500)}, 0x0) [ 606.524550][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 606.524576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 606.530399][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 606.536116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 606.547625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 606.553402][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket$packet(0x11, 0x8000000000003, 0x300) 01:50:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x4000, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000001c0)={0xf, 0x2, 0x4, {0x9, 0x80000000, 0x4, 0x3f}}) keyctl$negate(0xd, r2, 0x7, r3) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:31 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000000c0)={r3}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x400000) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000000c0)={r2, 0x7fff}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x6488, &(0x7f0000000500)}, 0x0) 01:50:32 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 607.164518][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 607.170386][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000300)=""/4096, 0x200000, 0x1000, 0x40}, 0x18) ioctl$TIOCCONS(r1, 0x541d) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x6558, &(0x7f0000000500)}, 0x0) 01:50:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x103c00, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="00007800b6000000000444030000000200000000000000000000120500000002000000090000000000000064244f7e7468302d6d696d655f7479706573656375726974792a7d62646576707070315c11002f6465762f76686f73742d76736f636b0012002f6465762f6c6f6f702d636f6e74e3abe8202a1fd9543d6dc415657a41726f6c0000000200213a", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5], 0x8f) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) ioctl(r0, 0x3, &(0x7f0000000140)="0000385aa18968f60c5c7e") r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 01:50:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x5, 0x1000, 0x2, 0x0, 0xf}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x1d, 0x2, 0x7f}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl(r2, 0x80, &(0x7f0000000180)="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") 01:50:32 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:33 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 01:50:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x7f00, &(0x7f0000000500)}, 0x0) 01:50:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0xb96708ff0b4f9df8, &(0x7f0000000000)="9ab0e398eb473b270ec6f82e485a20bc54eeb7c890c1c44e13bb887988e15131e339c9231db3b9c79fbd1655afb88ca9", 0x30) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 01:50:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:50:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000000)=0x3f, 0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0xfffffffffffffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0xe8, 0x6, 0x62, 0x2, 0x3, 0x100000001, 0x2b0, 0x40, 0x2a1, 0xffffffff, 0x9e75, 0x38, 0x1, 0x7f, 0x2, 0x7fffffff}, [{0x6474e551, 0x8, 0x3, 0xffff, 0x0, 0x5, 0x7, 0x8001}, {0x6474e553, 0x400, 0x80000001, 0x8, 0x5, 0x2, 0xff, 0x7ff}], "81b9eac54d278d16d6500348245d1d4c5abbe894ae5750f74e740c63921704e6f0c229ebb1e4eaa3faf2ceca404b803d2e5829ae9880"}, 0xe6) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8035, &(0x7f0000000500)}, 0x0) 01:50:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=r1, @ANYBLOB="041d0000e57c52ff158fefb99e0fa22fb9146d26eed6b5630b057f5b8234979dc72a222891ffc128facff24036fe634d68f7cb445cf9103d9f55bbdd37b6ccbbd39d7eaa7a3b04b2f9a2ec10f9ae96a1a5ab018725d8061cd11d7a8587f18d068287dc5cf5a396b0fca7a7dc547cb4f7e6d3a77e68190c4f52dd7049d1c5b0a06b8fcbd1d3be6a12ff05b71cfc992a62317d1a9ce24b90e7db5d94adb24867c0801a221d5bb7c879fca214ea983c1b99af45938600", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="040001000000000008000100", @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="10000000000000002000020000000000"], 0x4c, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 01:50:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x10001, 0x5, 0x0, 0x0, 0xf3, 0x2, 0xd06]}, &(0x7f00000000c0)=0x12) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000100)={0x2f, 0x1, 0xc, 0x7, 0x101}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) 01:50:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a3165"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {0x0}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8100, &(0x7f0000000500)}, 0x0) 01:50:34 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:34 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r1, 0x330, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x23}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x8c0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") chroot(&(0x7f0000000080)='./file0\x00') r3 = syz_open_dev$media(&(0x7f0000000600)='/dev/media#\x00', 0x1, 0x100) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000640)=0x10, 0x4) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) connect$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 01:50:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000300)={0x8}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x218201, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000040)={0x1, "3f52418979d74bf667f78af82ffe3d9e8052e12638341110f67d531a323d88af", 0x2, 0x0, 0x7f, 0x800008}) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x3, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x4) 01:50:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8847, &(0x7f0000000500)}, 0x0) 01:50:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, 0x0}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:34 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x324, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) sendto$packet(r0, &(0x7f0000000040)="58184cfa98ffe73ebe89fc04ac5187345a0c27f813275df76eed398262243478a3d518c1130bbe6217f43b2dd2507e7de3ee1938513cc2daad191a2e82759261f7a49f90dd787bd55fa7f011c649c0dc90033ed76343defba050f305bcaa258712d64f9a5baa17661b78686fddc7e8a714c34bc26090e524d7fd9c950c1953944d456736648188b44189bfd8f53f06f19b8e007684445ae2591f9d199ac4d38a72f3f09805008c9f", 0xa8, 0x8001, &(0x7f0000000280)={0x11, 0xd, r1, 0x1, 0x7f, 0x6, @broadcast}, 0x14) setxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@sha1={0x1, "62f796bdde3fffd4d7b66f3804058c5f87c7a822"}, 0x15, 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write$UHID_INPUT2(r0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRESHEX=r3, @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="590681f519c83fb7f5e802c12f2a6a9ab9a5c5003e288933ef07e5efc1a7be42f278d5542efb789f81380040f82855f18a60b9b3a09326e7ef702f1a2d98bbefc4fb14d67a4a8d4b28014fe5d4dd22e8f9526a63d3603de491cf04a9770219a216e9c797a71b73a353b63567d12eb4ddfb066a8067983a7af0536925dfbc3732a8f3cda904b3b11107c1bafe66593242a6eec8fde2c781218df0a68eab946946178fc9a160546d3a16ba9c1654fc676b823a5ad99cd9e050c7dc72", @ANYRES64=r0, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRESHEX=r0, @ANYRES64, @ANYRES16=r2], @ANYRES32=r2, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="9853f32c10bc3b20466786823323f942bd961f91b55b07424baa3abf918353613904469ef63b1aeebc0388fb92e6b51fa9fe3af8387225c02191944258ed7572ff581dff79fa0b5def8314effb0e5b8fd06ef71f8bb264514966f736c66d3a2282c951b54d960de5da8e2bd91b87ba3f42f4822f4b1063a3d5a85271f6f13a2a9ac01ca77b021d00aa1851fb3fceff54245e7d19e66a680cac29cdf3e0201cbf3564021aecf5ed2808048c2d2468f5dc0cbe3eae6c30b4823bf8cbf11b15d477c99826700e6a10e794", @ANYPTR64, @ANYRES32=r1, @ANYRES16]], @ANYBLOB="4fa5577aaa1fc32c04977124cf75c2db44fba52990b157c987b7adb91c491c4c6773ed57e048dd42e4ca4068092b72363a152fea7d2be5253dfc09f56b2cfce5209e53faac2b09f18d6295fd62f4adf1c5208baa0e9647f28b663f91a526bde43d9d5681b489a410e2f509366350013c22a6b35605d3146c75d2de23720435bfea30302e7911488cebbdc69551b148b9b5a9aed7dd708de26bdeaecc9d38355184ce5af80cb45ce99df5c9713d8851"], 0x4) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000380)=""/162) sendmsg$xdp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="84eb47b3ee16cb1dc00b5f40bc3aa7a16c7419215cb85ebaf3a54cafa1c99b2a741c95980f09a47a2d7267448bfd868616191d65ba4ca7bb0e6960d473baf42669725081db0f0368d674413c46f6c1cb1dfdd5f994d5c62501ca7c2d5cac93e0a48105c1ef6774e5ebc43de9f56b269f69e80a98404a2373abb0193b331cdcb10c0b1b8bb4e990723b82bbc58781f2c134c3e6a508e25efc69e52e08ca61f96cfbd6", 0xa2}], 0x1, 0x0, 0x0, 0xc000}, 0x4) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000500)={@ipv4={[], [], @local}, r1}, 0x14) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) accept$alg(r0, 0x0, 0x0) 01:50:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) flistxattr(r0, &(0x7f0000000000)=""/106, 0x6a) 01:50:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8848, &(0x7f0000000500)}, 0x0) 01:50:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8864, &(0x7f0000000500)}, 0x0) 01:50:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8906, &(0x7f0000000500)}, 0x0) 01:50:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xc405, &(0x7f0000000500)}, 0x0) 01:50:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xc805, &(0x7f0000000500)}, 0x0) 01:50:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x34000, &(0x7f0000000500)}, 0x0) 01:50:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x10001, 0x400000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) 01:50:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x10000, 0xc215, 0x5, 0x2, 0x12, 0x401, 0x800, 0x3, 0x6, 0x5, 0x5, 0x40000}) 01:50:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x40000, &(0x7f0000000500)}, 0x0) [ 611.324508][ C0] net_ratelimit: 18 callbacks suppressed [ 611.324515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 611.336065][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="240000002a0007011dff0e950101830020200a002000000006000000010000000d00ff7e", 0x24}], 0x1}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 611.634262][T25686] IPVS: ftp: loaded support on port[0] = 21 01:50:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x400300, &(0x7f0000000500)}, 0x0) 01:50:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8000a0, &(0x7f0000000500)}, 0x0) [ 612.044500][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 612.050339][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x1000000, &(0x7f0000000500)}, 0x0) 01:50:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 612.764474][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 612.764480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 612.764537][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 612.770319][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 612.787615][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 612.793379][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 612.909784][T25686] chnl_net:caif_netlink_parms(): no params data found [ 613.113634][T25686] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.121102][T25686] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.129404][T25686] device bridge_slave_0 entered promiscuous mode [ 613.137739][T25686] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.145003][T25686] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.152644][T25686] device bridge_slave_1 entered promiscuous mode [ 613.302941][T25686] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 613.312956][T25686] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 613.462873][T25686] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 613.471125][T25686] team0: Port device team_slave_0 added [ 613.477206][T25686] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 613.485369][T25686] team0: Port device team_slave_1 added [ 613.491489][T25686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 613.499495][T25686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 613.577830][T25686] device hsr_slave_0 entered promiscuous mode [ 613.635083][T25686] device hsr_slave_1 entered promiscuous mode [ 613.827877][T25686] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 613.835883][T25686] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 613.850645][T25686] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.857754][T25686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.865154][T25686] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.872222][T25686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.024153][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.032033][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.064929][T25686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.076142][ T446] device bridge_slave_1 left promiscuous mode [ 614.082980][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.136808][ T446] device bridge_slave_0 left promiscuous mode [ 614.142991][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.924462][ C1] net_ratelimit: 11 callbacks suppressed [ 616.924471][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 616.924518][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 616.930170][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 616.935965][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 616.953053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 617.917792][ T446] device hsr_slave_1 left promiscuous mode [ 617.981679][ T446] device hsr_slave_0 left promiscuous mode [ 618.041623][ T446] team0 (unregistering): Port device team_slave_1 removed [ 618.053944][ T446] team0 (unregistering): Port device team_slave_0 removed [ 618.066610][ T446] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 618.089456][ T446] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 618.186969][ T446] bond0 (unregistering): Released all slaves [ 618.279242][T25686] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 618.284552][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 618.289732][T25686] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 618.291812][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 618.301520][T25686] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 618.311052][T25686] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.323214][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.331230][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.342145][T25686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 618.350355][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.360912][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.369642][T17947] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.376748][T17947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.386931][T25686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 618.401513][T25686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 618.414163][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.423108][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.431876][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.438972][ T8048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.447735][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.462837][T25686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 618.471827][T17952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.485917][T25686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 618.493545][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.502461][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.512286][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 618.576420][T25686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 618.591837][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 618.601025][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 618.618377][T25686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 618.628183][T17952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 618.637253][T17952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.648967][T25686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 618.657617][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 618.671859][T17947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 618.682611][T25686] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 618.690027][T25686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 618.707869][T25686] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 618.721134][T25686] 8021q: adding VLAN 0 to HW filter on device batadv0 01:50:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) io_setup(0x4, &(0x7f0000000000)=0x0) io_cancel(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000040)="f47546fcd7d5db048bd3c53ed50b19334ff77c085448ff7a684e371187607f8c0cf0663872a5a5398c1d4f41dc4de96f", 0x30, 0x60000000000000, 0x0, 0x1}, &(0x7f00000000c0)) 01:50:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!]\x9d-.cgroup\x00', 0xffffffffffffffff) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000140)) keyctl$get_security(0x11, r1, &(0x7f0000000180)=""/230, 0xe6) modify_ldt$read(0x0, &(0x7f0000000300)=""/4096, 0x1000) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000280)=[0x6, 0x4cd4]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001400)=ANY=[@ANYBLOB="010001000000000003000000000000000200000000000000", @ANYRES32=r2, @ANYBLOB="000000008000000000000000000000000000000000000000000000004cb7c45ea6ca0e3d45ce247114243bd0c9a0f046304e75bb4cf2195d01ca6b1c704882421f1331d0711c72700f9e52b5f049310674d0fa072ab59a4e119c7de415e4f73c43544726df9b2a83771928e865625a024e4a02475ee4dd92fb6e77a4da509d1e9802ad10f00b3fda95e0c9d1d43218541262ff0fd582d3639740a2cfe7960b558ebaa36bb9ef0e6a8ad8a3", @ANYRES32=r3, @ANYBLOB="00000000906200000000000000000000000000000000000000000000"]) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) [ 618.804658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 618.810472][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x4000000, &(0x7f0000000500)}, 0x0) 01:50:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 618.924537][ C0] protocol 88fb is buggy, dev hsr_slave_0 01:50:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8000000, &(0x7f0000000500)}, 0x0) 01:50:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x42800, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x20, &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0xffffffff, 0x6}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$void(r2, 0x0) 01:50:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) recvfrom$netrom(r1, &(0x7f0000000040)=""/245, 0xf5, 0x10000, &(0x7f0000000180)={{0x3, @default, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) 01:50:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) fcntl$getflags(r1, 0x40a) 01:50:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8060000, &(0x7f0000000500)}, 0x0) 01:50:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x67) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) prctl$PR_SET_PDEATHSIG(0x1, 0x23) 01:50:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x10142, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0xc4040) ioctl$TCSBRKP(r2, 0x5425, 0x866a) r3 = getpid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r3, r4, 0x2a, &(0x7f0000000080)={0x33, 0xae, 0x3}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000180)={0x1, 0x1, [0x4398, 0x0, 0xffff, 0x7ff, 0xffff, 0x2, 0x100000000, 0x2]}) rt_tgsigqueueinfo(r4, r4, 0x1c, &(0x7f00000001c0)={0x24, 0x4, 0x4}) 01:50:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1000000006102c8, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x200200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x3c, 0x0, @in={0x2, 0x4e22, @local}}}, 0x90) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xa000000, &(0x7f0000000500)}, 0x0) 01:50:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x401, 0x18040) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RCREATE(r2, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x4}, 0x100000000}}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xe000000, &(0x7f0000000500)}, 0x0) 01:50:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x18200, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000040)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="61f5077470815465c20543e31b056b7cd484d46883596aad32671ae9deab19083077a8659c3169de7169b570a33e0b557b32863fa6637012e5d98a40a0b7809e61eabf573ab4f4931f7911f9661f790a2983171b985b5039adf0a5198849d11bd69246f215cc2323836fbec95dfebf9a610bbbbb6f7a0bd702039d57a0ba55389130896346d1a9b56f818b7645ed106ac57b360da2f1558620e3f13758cb91844368c0c7b5aa44a229b1514fadbc353f59d7e7c5e15557b44c1f7d97", 0xbc, 0x100000001, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000100)="edc3b06064d9ab84751616f03d594bace5fd617bdd83fc7818af4e10827b4e15", 0x20, 0x1ff, 0x0, 0x3, 0xffffffffffffff9c}]) 01:50:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x11000000, &(0x7f0000000500)}, 0x0) 01:50:46 executing program 0: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @rose, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80800) ioctl(r0, 0x100000000, &(0x7f0000000080)="03067968637a18cff92defbb53e6d111768e3cd5652bf2034b2bf504a0fb8077b11fe2e825debb92d8248d3427ac06810a5de367d966c736f1f6da1f4dfa") socket$unix(0x1, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x88000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000003c0)={{0xffffffffffffffff, 0x2, 0x7, 0x2, 0xffffffffffffff00}, 0x3f, 0x80000000, 0xc7}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r2, r3) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000480)={'bond_slave_0\x00', 0x8200}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 01:50:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) getpeername$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x0, @remote, 0x245a}, @in6={0xa, 0x4e21, 0x1, @remote, 0xfa}, @in6={0xa, 0x4e22, 0x81, @local, 0xd772}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0xfffffffffffffffb}, @in6={0xa, 0x4e22, 0x100, @local, 0x702c}, @in6={0xa, 0x4e23, 0x40, @rand_addr="e981b285cb24bcc328f3a3c95cca66cc", 0x55}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @loopback}], 0xffffffffffffff8d) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0xfffffffffffffff9, 0x8) 01:50:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x18000000, &(0x7f0000000500)}, 0x0) 01:50:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@null=' \x00', 0x2, 'ip6gretap0\x00'}) 01:50:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x200000, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0x8080) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000040)={0xa2, 0x3f, 0x291, 'queue0\x00'}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, 0x0) setgid(0x0) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x3f000000, &(0x7f0000000500)}, 0x0) 01:50:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) write$binfmt_aout(r0, &(0x7f0000000300)={{0xcc, 0x2, 0x800, 0x1d4, 0x129, 0x5, 0x35, 0x2}, "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", [[], [], []]}, 0x1320) 01:50:47 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x208400, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fffffff, 0x121000) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000040)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)) setgid(0x0) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x43050000, &(0x7f0000000500)}, 0x0) 01:50:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x4040534e, &(0x7f0000000180)) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@mcast1, 0x7d, r3}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3f, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x7) 01:50:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x60000000, &(0x7f0000000500)}, 0x0) [ 622.444493][ C1] net_ratelimit: 21 callbacks suppressed [ 622.444501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 622.455985][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20800, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/72) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x8}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f00000000c0)={0x3, 0x80000000, 0x4, 0x200}) 01:50:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x65580000, &(0x7f0000000500)}, 0x0) 01:50:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r2 = perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0xffffffffffff918d, 0x80000000, 0xfff, 0x8, 0x0, 0x0, 0x40000, 0x0, 0x5, 0x400, 0x2, 0x8000, 0x9, 0x140000000, 0x982, 0x7, 0x4, 0x7f, 0x2, 0x6, 0x23, 0x0, 0x0, 0x2, 0x0, 0x3, 0xffffffffffffff00, 0x8001, 0x2, 0x7, 0x400, 0x3, 0x2, 0x4, 0xe2, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x8, 0x5}, 0x4100, 0x400, 0x1ff, 0x4, 0x1f, 0x4}, 0xffffffffffffffff, 0x4, r1, 0x8) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x7) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x8000000000000000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x0, 0x0, 0x400, 0x4, 'syz0\x00', 0x3ff}, 0x3, 0x1, 0x6, r4, 0x4, 0x2, 'syz1\x00', &(0x7f0000000200)=['*uservmnet0\x00', 'lobdev,ppp1*\x00', '/dev/loop-control\x00', '/dev/cec#\x00'], 0x35, [], [0x6, 0x2, 0x6, 0x2]}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) 01:50:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x3fd, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x7f000000, &(0x7f0000000500)}, 0x0) 01:50:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4000, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x7fffffff}}, 0x18) [ 623.164500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 623.164702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 623.170403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 623.176064][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 623.181802][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 623.193231][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 623.254500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 623.260433][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x38080, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000040)=""/40, 0x1000, 0x1000, 0x8}, 0x18) 01:50:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x80350000, &(0x7f0000000500)}, 0x0) 01:50:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(0x0, 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000480)="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") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket$inet_udplite(0x2, 0x2, 0x88) 01:50:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:48 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffa, 0x100) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x10000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x81000000, &(0x7f0000000500)}, 0x0) 01:50:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") signalfd4(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x210280, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)={0x20, 0x3000}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3b, @remote, 0x4e23, 0x0, 'dh\x00', 0x12, 0x0, 0x51}, 0x2c) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xffff7fffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x86ddffff, &(0x7f0000000500)}, 0x0) 01:50:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000000)="07dc1ff311123f0988a070c5c80005fae84362647eb45e3a6028da8ad07cf42968afa022008935f1669e5ef4c0ab8b6c2ed1986f5f6e7d41c2706f1381f3f31d5ac70847889b9a48824950a9285b3089b5dea2aaa5752a9ed5f632944f03fdb107c1c90181b7e0d35cbdffd715a29010cfad1b2815a40d7f83c7d131f9f2186446d8ade09b0f8b90c23c439fedb3d48304e1f00d03dbfd183ecba42da04020369cb0ce0300cc62aeab87e7afc3214ba63fb1456ee5e06bece4090206bfc5803f54325ae3dc5c49ed1a200ce8d387947aa525c3f1c988b40d5d88f4ebbe5020ce7f6f7f") socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 624.527098][T26091] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 01:50:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) 01:50:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x88470000, &(0x7f0000000500)}, 0x0) 01:50:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) 01:50:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm_plock\x00', 0x8100, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x1180, 0x8001, 0x6, 0x67, 0x0, 0x4, 0x20322, 0x1, 0xfffffffffffffc00, 0x8, 0x8, 0x7fff, 0x6, 0x3, 0x55, 0xa69, 0x6, 0x5c1b13fa, 0x7, 0x8000, 0x6, 0x7fffffff, 0x9, 0x1, 0x7, 0x0, 0x9, 0x9, 0x200, 0x8, 0x3, 0x1, 0x5, 0x6, 0x4aa, 0x9, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000480), 0x8}, 0x68, 0x7f, 0xb1c, 0xf, 0x9412, 0x0, 0x8}, r4, 0xffffffffffffffff, r5, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x2ff6, 0x1, 0x400, 0x5, 0x0, 0x1, 0x80100, 0x4, 0x8, 0x2, 0x7fffffff, 0xf5, 0x96, 0x8, 0x3, 0xd2e, 0x80000001, 0x4, 0xa71a, 0x7ff, 0x9, 0x1, 0x91, 0x8000, 0xffffffffbeeccc8f, 0x6f, 0x8, 0x8, 0x1000, 0x0, 0x3, 0x2, 0x0, 0x0, 0xb2c, 0x8, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000380), 0x7}, 0x0, 0x0, 0x9, 0x5, 0x500000000, 0x9, 0x6}, r9, 0x6, 0xffffffffffffff9c, 0x1) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getgroups(0x7, &(0x7f0000000100)=[r1, r2, r3, r7, r8, r10, r11]) ioctl$VT_DISALLOCATE(r0, 0x5608) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) 01:50:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000080)={r2, @in={{0x2, 0x4e24, @remote}}}, 0x84) 01:50:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x88480000, &(0x7f0000000500)}, 0x0) 01:50:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfffffffffffff000, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) 01:50:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 01:50:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="917a7cb7032424e704ed08b0d515ce6f7aa814a342a11576f9aed95a2a97878cb791220e9296df1fac8011bee68b44f0bc7c59214666f1d1dc1105e40daf2e4443d01249881aa64c69477c5be9da1b448fcb2f4b032f4a776a216e58c43eaeb74b2150f98b2d1ed34ded7ef51dbccc017a313c6293c1c30c8931f948fcb86acbc3e83c5d8b871126bcd5ac6a6e2cccd4b1d5d0c44126025e00ac428ec2d8442f4e72ab629e6ddca2c8e7b0f4e4d9bdcc34db9131c1216f23578683a00740b45b2eb9540c0686184fa4b9398c284251809a2d84d0cf07a891071fbe895326c7165e24", 0xe2, 0x8c9}], 0x200010, &(0x7f0000000280)=ANY=[@ANYBLOB='nodiscard,func=FILE_MMAP,uid=', @ANYRESDEC=r2, @ANYBLOB="68514b09df0ccdc0afaf5728f255"]) 01:50:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x88640000, &(0x7f0000000500)}, 0x0) [ 625.786494][T26151] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 01:50:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/59, 0x3b}], 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x600100, 0x0) poll(&(0x7f0000000000)=[{r1, 0x200}, {r1, 0x2}, {r1, 0x552}, {r1, 0x282e2a8c134768e}, {r1, 0x326}], 0x5, 0x8) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x8000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000180)=0xffffffff, 0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000080)={{0x2, 0x1, 0x4, 0x2, 0x3}, 0xfffffffffffffff9, 0x3ff}) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) [ 625.828161][T26151] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 625.841359][T26151] F2FS-fs (loop2): Unable to read 2th superblock [ 625.853779][T26151] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 625.862593][T26151] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 625.870972][T26151] F2FS-fs (loop2): Unable to read 2th superblock 01:50:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x88a8ffff, &(0x7f0000000500)}, 0x0) 01:50:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000640)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000680)={0x0, 0x4, 0x1, [0x7]}, &(0x7f00000006c0)=0xa) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={r2, 0x20}, &(0x7f0000000740)=0x8) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl(r0, 0x5, &(0x7f0000000100)="2a044b22633ac60173b0f9cba8608c27714f842f25daa3b06c269ebd9c3f1ec1dbd1c0a5a0c43e6dc5a7a35f8a") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 01:50:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x88caffff, &(0x7f0000000500)}, 0x0) 01:50:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) kcmp(r2, r3, 0x6, r0, r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x89060000, &(0x7f0000000500)}, 0x0) 01:50:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xa0008000, &(0x7f0000000500)}, 0x0) 01:50:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x105, 0x3, 0x1, "9196e3d33aca1f6b1cd58901b4662a87", "802553097419fff265e3a76e2efc6679afb0d75a679be2d5acbf656fc950f350095c1fc0ca2904ecf7e960f9f890190852d1320c1ef65efbd9d559083b91e87fea5a25092516b1f9b099c380e07000be2b03e550eb48cc47ec6e03eed3f52091dd9f834fa98eae86d5c963350f38d9ce01519854a7706da9b3dc712cfab694a9e6dd5a05afed66e3db30cf5cf62bd24a9fb4f017a905a5f10ae4fec435b45adacfc04a9bbcff4aae37011123eacf2bab6c6c843473f2e905235d01cbd771263edea43313cfebe7996a907dfa1084229f8db8dcc760965d076e058f1de0c5ffbf9fb27ff631d50fef1cf937f0ae6b363f"}, 0x105, 0x1) 01:50:51 executing program 2: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="0adc1ee83cc18b503a3690c33dee3a2080525e673380bbea12") r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) 01:50:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xc4050000, &(0x7f0000000500)}, 0x0) 01:50:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c2f77b2e51770e52b5ffb25438294310ac8c8bde0336bf13378779501da4861ad55d55278e9e188623381a8f978250f734d17e81fdfbbb9275f7fe2e51c7a") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x41, 0x101010) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140)=0x3, 0x1000001b4) syz_execute_func(&(0x7f00000000c0)="c4a3395c664200c4218de5ab05df0000c443453867090b0f603cc2c401fd705f000c660f6b491ec4e1122aab00000000c4017d5109c4e175e106c48151602b") openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x200, 0x0) 01:50:52 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x5}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6771}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7aa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9, 0x40800) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_getscheduler(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000280)={0x3b, @multicast2, 0x4e22, 0x1, 'lblcr\x00', 0x8, 0xa6b, 0x7}, 0x2c) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000003c0)) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000300)=""/131) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={r4, 0xeb, "20a93774acd8727e80d6e77ed94a094022681dfb53ec64a8d0cad29c92b62b45dec25fb1d863431307a8fb1337555aa6f14a7eec68aa9ecd98242fb64cd6972936a6deab88808944e79a0338934e0d84bb0b6330c7440da88765f0ebe5c300e3c96b9f841982d7f1937d62b355e376b183d983edf0fc4409d420432be01f4db76fc4d2499a56c61a3865763d15fa478079d9797427348dd8afb17c549da31df68e4616e8135e6208fff25139a64f9634d7b4e66b15b773349c6452deda0676e49783f2fe0ada423b8306dfd212b35d8b38321ecd68425928331dae6afd8e559b9a30738143d8860e6970fc"}, &(0x7f0000000200)=0xf3) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000240)={'bond0\x00', 0xffffffffffff0001}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 01:50:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xc8050000, &(0x7f0000000500)}, 0x0) 01:50:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000180)=@v2={0x3, 0x1, 0x7, 0x4, 0xe3, "c6964ff878b149f2ad821996afcfc76121d913705775acb48d919043c23be183525b7fde11897d60a49e99a26e262d143584860749d70c0b8c6e3906fd23128a3260d8112864de13d7f73dd700c57df024d68da37bfbc849854536d1e261207c008b5f45799e6784843d2276864269360ee8f5b9bcc5e4ce6b5c5e8ce242d6174542359c7dfbb4486ffe0518e16cebd3e2e16487f3b5cd8b1c08ddc2bee3a8035d7a42c6cc74ac34fb88133357bb30a92e643a3d1718c541225062ef4a9dfc0f674ad9fb4b5b6675b83d3548193c6e2906bfb2d9182311f8d36d3f90c6927bc9ec2968"}, 0xed, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0xc) waitid(0x2, r2, &(0x7f0000000340), 0x0, 0x0) 01:50:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x400000000000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2}}, 0x20) 01:50:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5671fbc4329ea3eba070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x30, 0x0, 0x1, 0x9, 0x7fff, 0x6, 0x2, 0x2}, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x9, 0x1}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x80, 0x0, 0x60, &(0x7f0000ffa000/0x3000)=nil, 0x1}) 01:50:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xeffdffff, &(0x7f0000000500)}, 0x0) 01:50:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xdac3, 0x440082) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) userfaultfd(0x80000) 01:50:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:50:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='/dev/loop-control\x00', 0x12, 0x1) dup3(r2, r1, 0x80000) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xffffa888, &(0x7f0000000500)}, 0x0) 01:50:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:53 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x100000000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x440000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x1, 0x201, 0x5, 0x0, 0x2, 0x100, 0x1c27, 0x0, 0x2, 0x401}, 0xb) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 628.684465][ C1] net_ratelimit: 19 callbacks suppressed [ 628.684476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 628.696041][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:50:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000000)="000000000000000061dfbcdb3c565e44000000000000000000") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) fsync(r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0x7, 0x874, 0x7fffffff, 0x1, 0xfff, 0x3, 0x1}, 0x1c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x202402, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080)=0x68, 0x4) 01:50:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xffffca88, &(0x7f0000000500)}, 0x0) 01:50:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:54 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20440, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000080)="71f659280000e6000000004c678a992bd286cbf4334ba2ecdd0067c69fa081c0bdbaaacd52e7f8aba95e78475be0d4f072ead3d2a7df810bfd504ac21250a7c4040c5f466885fc69ecbfa312a67be3e502dd1f9b8ebc041cccceeb6610b854c4bcaad3f0bf87848e69951ab32886b8129157e099f6ce3c3c1cd01fb5f55bbb9f57ff267dce1df80751124b1a38045dd32a95222bec7a70f038f8c67119ba18af3aa86811") r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x0, 0x100, 0xb5fd, 0x100000001}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r1) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xffffdd86, &(0x7f0000000500)}, 0x0) 01:50:54 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc060000000000000070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000180)="cd6fbe688fcebe8a2780c468f6fae5c0691fc0c2600d2c8e10fcd192f7f9ace4bc000afbd9fbb93d5a53681037df71774bd5eb0fadeecfdebd09eeedbc5c3cfad563a1876b31c765d642a92aff432f3b1cde045a6bab8f1f67fdc9995b7c4bc04bf4b227a8564206f00c9880cd08e542b5dd84fd9a379d4f8648c3c4880adfd26fa3e14b56d8c3a33bcfe2f14a701f0eb53e9b663f58aab4e5ea560bd5f867130032359515a9307f7f5207aa8b095fa3c0bae5dce607e3d1f62797a0703702b6da", 0xc1) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x20003c, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x65, 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80202, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x670c02) 01:50:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xfffffdef, &(0x7f0000000500)}, 0x0) [ 629.404499][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 629.406489][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 629.410480][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 629.416690][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 629.429713][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 629.435671][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:54 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x301040, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0x7, @raw_data="267126cfa5f5f9c0b944e9bd0c44d2eb0842cfcf0c14e7daf17992ee191aea962722fa2c7b179a4da26e29b9d1a064a127061897ddc7c79855494ed2224bb6e02326b45ff31cb166092d0466d4c5b40749931453aa7859afee77d20c3db6b226270ee279da16b0a4b6635a423d516675be7ce35e618b285bc38a5904bbb3d3fe561e3428eee753e0951d4a0e602dc230b80bfd7da1f2599b9b6c5ca79d37cd9b658a0f5172a607fea7d9553d69a730f357f36555a8eaf486d37bdc17f61f00f14afac8c3cfb9c4cd"}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a000") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)={0x3, 0x0, [0x0, 0x0, 0x0]}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast1}, &(0x7f0000000040)=0xc) syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)={0x1, 0x0, [0x78, 0x9dc]}) syz_open_dev$ndb(&(0x7f0000000380)='/dev/nbd#\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x0, r3}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 629.484857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 629.491612][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:50:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$packet_buf(r1, 0x107, 0x17, &(0x7f0000000180)=""/160, &(0x7f0000000040)=0xa0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x80900, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 01:50:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:50:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xffffff7f, &(0x7f0000000500)}, 0x0) 01:50:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = accept(r0, &(0x7f0000000180)=@x25, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x4, [0x6, 0x2b, 0x372c, 0x7]}, &(0x7f0000000100)=0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000300)={0x3, 0x10f000}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3, 0x1000}, &(0x7f0000000240)=0x8) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4c000, 0x0) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, {0x5, 0x200, 0xd3, 0x80000001, 0x7ff, 0x302}}, 0x8) write$vhci(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="04eba7c6e7b5c043a429df52a2d6f98e0f061da7d56806c0e2c8e47c29e35e87c692772f2ac6ee4cfc80a4b9c8d2c4f819baa34e534f7d65dfa22eb3b5896ad0ea105c2b60d4dfa1d1106e66a0a358a46d2b5b036e3ae15c1693acfa0962d24ed2f432fbce43652dc4d0e50d617f199118947e0eb7a414140dacb2bcd7cc76365fa4755e088ac1baf51e565fa9f053cef98a66719299b558052f4e3af29df104f27531c74d9101e659e0d5c9fe4a3206eb609828a5c1442b795d745d84dfa3b3d8758a532fa2bb4c3455a90202a0f89dd73b9b807eae075e2b71143ef5c1b95866c3b5f385332a034777f84e18dff1aa122f8a785379898b824524e0565e4ecde55c9a98e2938683952decf365ae079b5c3b829dfabf037c1b2d5950896231f3f7915b241ff5beb65300e2e77ef8d3c322050289b037656c7af545eca06c6b5d05279e401f984de637d1002487048ab9248b7f16c617e84ba665fdd3dcf2b03c00d71c85d3f5835e1492ff8ac3f28d99cb18f5dfb07c50588a5175466cb09e440f1aa89043acc779ba03490eebbe33b1780190cc8cbb4970796a06847bfc4787db9b70eac06232bd1d3cf7df051e7c8475e533d2f16354cb7870771c22963a227005ec897813032eae9f56884833e894688a7d"], 0xfd) 01:50:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 01:50:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="010000f251ee") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:55 executing program 5: r0 = socket(0x20002000000010, 0x7fe, 0x0) dup(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r1 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 01:50:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x4000000000000, &(0x7f0000000500)}, 0x0) 01:50:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:55 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="0adc38023c123f311116b7") r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x408002) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000140)={0x3, r2}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000240)={r3, r4+10000000}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0xb026) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000180)) fcntl$addseals(r5, 0x409, 0x8) 01:50:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x80}, &(0x7f0000000080)=0x8) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x8, 0x18000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x3, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x36f8, 0x8001, 0x5, 0x40, 0x320d5923, 0x1000, 0xfffffffffffffffb, r2}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) getgroups(0x1, &(0x7f00000002c0)=[0xee00]) fchown(r1, r4, r5) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x81, 0x600) 01:50:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x40030000000000, &(0x7f0000000500)}, 0x0) 01:50:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1e, 0x200000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @mss={0x2, 0xc00}], 0x2) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 01:50:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8000a0ffffffff, &(0x7f0000000500)}, 0x0) 01:50:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) 01:50:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2001001, 0x0) 01:50:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x6161f1ea8f84f536, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0xa3ffe, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x2, 0x1, 0xffffffff80000000, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:56 executing program 2: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001c80)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x100000000000000, &(0x7f0000000500)}, 0x0) 01:50:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/90, 0xfffffffffffffcec, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000240)={0x1, 0x0, 0x201f, 0x8, 0xddb0, {0x2, 0x5}, 0x1}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2, 0x0) ioctl(r2, 0x0, &(0x7f0000000180)="561007de700d6b2f3cbb09161aa8c50f964286b7f8d2f23a42aad2c2b3452cd4d6def8b2635941b32d5ed305de3ef3bfb7ed4ef7b18c8420af3465332956b306fde259930d7329b4cc99bbb79071281fe8aec39d149401ffd58f33e751f13c87a381934e9f3db6261bcee4a01045a1cc69c2195dc8ef1a8edaaf1c3aefedab1117756e08c12d1cdee6951132700c872dffa423929ea0241075dbd57e885a95cfdab37741eb1120f550d02d268b") 01:50:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair(0x4, 0x0, 0xffff, &(0x7f0000000000)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x0, 0x0) 01:50:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x400000000000000, &(0x7f0000000500)}, 0x0) 01:50:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) accept$nfc_llcp(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x60) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$RTC_PIE_OFF(r2, 0x7006) 01:50:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c6465e6636f6e7374656d5f752c6673636f6e746578743d73"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 01:50:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x800000000000000, &(0x7f0000000500)}, 0x0) 01:50:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r2, 0x1f}, 0x8) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x39f14000000, 0xa00) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x14, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x10, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'bpq0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = semget$private(0x0, 0x1, 0x13) fallocate(r1, 0x4, 0x4887, 0x7) semctl$GETVAL(r5, 0x4, 0xc, &(0x7f00000000c0)=""/60) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) 01:50:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000762fff), 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200feddffff0000000008004500003c0000000000299078fc94cab908000000ffffffffbd8a5910"], 0x0) 01:50:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) r8 = getegid() getresuid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) r10 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000680)=0xe8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000b00)={0x2, [0x3, 0x400]}, &(0x7f0000000b40)=0x8) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000780)={0x358, 0x0, 0x1, [{{0x6, 0x1, 0x6, 0x8001, 0x7, 0x1, {0x2, 0xf3, 0x8, 0x4, 0xc738, 0x8, 0x8, 0x101, 0x100000000, 0x8001, 0x2, r3, r4, 0x20, 0x5}}, {0x4, 0xffffffffffffff01, 0x0, 0x4}}, {{0x4, 0x0, 0x9, 0x4, 0x101, 0x10000, {0x6, 0x0, 0x7663, 0x49b0, 0x6, 0x2, 0x7, 0xfffffffffffffa00, 0x9, 0x0, 0x3ff, r5, r6, 0x7fffffff, 0x5}}, {0x6, 0x8, 0x12, 0x100000001, '/dev/loop-control\x00'}}, {{0x0, 0x3, 0x14, 0x3, 0x3, 0x81, {0x4, 0x7, 0x1, 0x7fc000, 0x100000001, 0x400, 0x10000, 0x8, 0x6, 0xe10, 0x8, r7, r8, 0x2, 0xaab8}}, {0x5, 0xfffffffffffffffa, 0x12, 0x0, '/dev/loop-control\x00'}}, {{0x2, 0x3, 0xffffffff, 0x1000, 0x100, 0xa6c4, {0x3, 0x7, 0x2, 0x4, 0x4, 0x0, 0x1, 0xfffffffffffffff9, 0x1, 0xc3, 0x9, r9, r10, 0x6, 0x40}}, {0x5, 0x101, 0x12, 0x2, '/dev/loop-control\x00'}}, {{0x4, 0x3, 0x3ff, 0xc3b, 0x1, 0x400, {0x0, 0x0, 0xd7a2, 0x100000000, 0x4036f58e, 0x1000, 0x100, 0x6, 0xf3e, 0x450b, 0x4, r11, r12, 0x8, 0x1}}, {0x4, 0x0, 0x4, 0xed, '.GPL'}}]}, 0x358) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x806000000000000, &(0x7f0000000500)}, 0x0) 01:50:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x140, r2, 0x414, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xadf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3d54}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x140}}, 0x40000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 01:50:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001580)={0x7, 0x0, [{0x5000, 0x1000, &(0x7f0000000300)=""/4096}, {0x13000, 0x3b, &(0x7f0000000040)=""/59}, {0x100000, 0xec, &(0x7f0000000180)=""/236}, {0x5004, 0xe1, &(0x7f0000001300)=""/225}, {0x15000, 0xec, &(0x7f0000001400)=""/236}, {0x12000, 0x8e, &(0x7f0000000080)=""/142}, {0x1000, 0x6c, &(0x7f0000001500)=""/108}]}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") finit_module(r1, &(0x7f0000000280)='/dev/rfkill\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 01:50:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') ioctl$VT_ACTIVATE(r0, 0x5606, 0x7) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) fcntl$setstatus(r0, 0x4, 0x0) syz_open_procfs(0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='eql\x00'}) 01:50:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xa00000000000000, &(0x7f0000000500)}, 0x0) 01:50:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x30981, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x5) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x8000, 0x107, "6b4925fa2a4eceea0144ab32bee12b78b65389d49f741c22f1ad36abf86c013b", 0x200, 0x7, 0x800, 0x80000000, 0x10}) 01:50:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x4c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 01:50:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xe00000000000000, &(0x7f0000000500)}, 0x0) 01:50:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/tcp6\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x5}}, 0x10) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000040)={0x1, {0x1, 0x1f, 0x9, 0xe25}, {0x65, 0x3, 0xd4d, 0x8000}, {0x7fffffff, 0xfff}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xd7, r2, &(0x7f00000001c0)="0dfbac50", 0x4, 0x80000001, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000240)) 01:50:58 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2001001, &(0x7f0000000280)=ANY=[]) 01:50:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x200000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0xfffffffffffffff7}, 0x4) 01:50:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x15004) 01:50:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x1100000000000000, &(0x7f0000000500)}, 0x0) 01:50:58 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2001001, &(0x7f0000000280)=ANY=[]) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x100020, 0x0) 01:50:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x1800000000000000, &(0x7f0000000500)}, 0x0) 01:50:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:59 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000a40)='net/dev_mcast\x00\xee\xaa\b\x00\xcc|\xf0\x8aV\xef\r\xa3{\xa5j\x94!\xff\xaa\xdc07Q\x9c\x1c\x05\xabD-\xe6\xf9\xb1\xa7\xc6%\xa2\xbcL\xaf(\xff\xcd\xdf\xf0\xa5[g\x83>9\x04\xcc\xc8K\xe6,\x13\xebe;z\xcb#*U\xb6\x7f\x0f\x8fY\xa4vrLd\xcdO\\.!\xc9\x1cL\x06\xc1\xf7Ct\xd9\xb8\xcaV\xcb:\r\xfc{P*\n\x01d\xe8\x9a\x83\xd2VT\x9b\x11\xbdZ\xaf\xe8\x9b!f\xf0\x8f\x82\xf3Y\nteN\xaa\xb1\xf8\x10!\xc0FI\xac\bRf\xac\v\x9e\xef\xb5S\xaeU!') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 01:50:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000180)={0x4, 0x6, 0x7f}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x3, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x10000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0x3a, 0x1000, &(0x7f0000000040)="ba3fa933f073a9b13f4889ef8c85858174e5c5e4d7f0043351ff4ae0fad4fe3aaafd9a867b3a7ec0bb3c0aa7593898c624a62bd0b4d5733b6419", &(0x7f0000000300)=""/4096}, 0x28) [ 634.209058][T26604] EXT4-fs (sda1): re-mounted. Opts: 01:50:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x3f00000000000000, &(0x7f0000000500)}, 0x0) [ 634.418569][T26641] EXT4-fs (sda1): re-mounted. Opts: 01:50:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:59 executing program 2: r0 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) getpid() perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x362ed2a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x530) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x20000400000037, 0x0, 0xffffffffffffffff}, 0x2c) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='cpuacct.usag\x9d\x96\xf2\x85\xdeU\x99\x1f\xed\xff\xffpercpu_sys\x00\xad\xacN\x13m\xe7\xc9Ay\xfd#\x99\xd4\xe2\x87\xe7\x9a\x00\xf0\xeez\x11c=\x13\x87\n*\x8d\xa2\xb7_\xce\x87gs\x87\xae\f\xa5\x1b)!\xee\xb3P\xa5nl', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="25c124045325c9dd556062d02954c7b7e2d4992cfefa88da45b65b198bd15b419ac4943c758e690a65cd30fca8aaafc83ddb3ec99a01faa821b3e70326f4c3a0d46b46f5ec067ce011045951c9988fb5d27a36e07c479f5904a823354673200cd6e046766b9494ae606c3ef00ee2c4a00120d7791445f6f4e8b45f77ba3c53a9bf7bb2588f8bd5d45ebb14e7b5d3c96f36f571035f13a6670a3d46a9832fed3707c31e18b6261d258bfac014e897f527", 0xb0}], 0x1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r6}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000640)={0x2, 0x70, 0x10001, 0x400, 0x0, 0x5, 0x0, 0x99, 0x2, 0xc, 0x5d6c, 0x6b90, 0x6, 0x20, 0x100000001, 0x8001, 0xdc, 0x9, 0x7f, 0x101, 0x1, 0x101, 0x7, 0x15cc4724, 0x8, 0x4, 0x10000, 0x40000000001, 0xff, 0x1, 0x9, 0x6, 0x0, 0x81, 0x4804, 0x1000000000020, 0x4, 0x2, 0x0, 0x0, 0x6, @perf_config_ext={0x1ff, 0x401}, 0x2000, 0x1000000, 0x6, 0x7, 0x0, 0x6, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000780)='\x01Uof~_t\xdf\xeck\xe8O\xd4\f\xe7|l') recvmsg(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x24000, 0x0) 01:50:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:50:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "25ec54ab463fcf6108eb4cc83b1f11d3893e17c0bccf6881d5eebc917ede7331993fc311391d39c807d88f944c0b32cee4e40325f83517dc606adf46822cc415", "abce6c7fb3547df586244ccbbb63ecea535b0a0400850985faf2d9c023dc5017ba5881dfbc70a4ee3309337f3e394f4800", "adfd75ae0caa391b94911db035b76d52abe5762ae886a0199851990000060a87"}) 01:50:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x20ffffc, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x3}) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="810065082f6d6440005d31c16b2d50a41662aca3428d56fe2726ab25b0b1eb19265dabcd119ba5721d62127e4fbe682ab7616ff5cc322b502ba9c01378a8cc070648f337afa067f79994394742129465faa1001074555fbf8c56937d8667"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hfs\x00', 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:50:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x4305000000000000, &(0x7f0000000500)}, 0x0) 01:50:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x19, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 01:50:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x6000000000000000, &(0x7f0000000500)}, 0x0) 01:51:00 executing program 5: 01:51:00 executing program 0: [ 634.924557][ C1] net_ratelimit: 20 callbacks suppressed [ 634.924599][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 634.936094][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 634.963372][T26673] device nr0 entered promiscuous mode 01:51:00 executing program 2: 01:51:00 executing program 5: 01:51:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:00 executing program 0: 01:51:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:00 executing program 5: 01:51:00 executing program 2: 01:51:00 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x6558000000000000, &(0x7f0000000500)}, 0x0) 01:51:00 executing program 0: [ 635.644473][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 635.644479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 635.644535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 635.650273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 635.656111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 635.667532][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:51:00 executing program 5: [ 635.724618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 635.730441][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:51:00 executing program 2: 01:51:00 executing program 0: 01:51:00 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x7f00000000000000, &(0x7f0000000500)}, 0x0) 01:51:01 executing program 5: 01:51:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:01 executing program 2: 01:51:01 executing program 0: 01:51:01 executing program 5: 01:51:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8035000000000000, &(0x7f0000000500)}, 0x0) 01:51:01 executing program 5: 01:51:01 executing program 0: 01:51:01 executing program 2: 01:51:01 executing program 5: 01:51:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8100000000000000, &(0x7f0000000500)}, 0x0) 01:51:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:02 executing program 5: 01:51:02 executing program 0: 01:51:02 executing program 2: 01:51:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x86ddffff00000000, &(0x7f0000000500)}, 0x0) 01:51:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:02 executing program 0: 01:51:02 executing program 2: 01:51:02 executing program 5: 01:51:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8847000000000000, &(0x7f0000000500)}, 0x0) 01:51:02 executing program 5: 01:51:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:03 executing program 2: 01:51:03 executing program 0: 01:51:03 executing program 5: 01:51:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8848000000000000, &(0x7f0000000500)}, 0x0) 01:51:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:03 executing program 2: 01:51:03 executing program 5: 01:51:03 executing program 0: 01:51:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8864000000000000, &(0x7f0000000500)}, 0x0) 01:51:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:03 executing program 0: 01:51:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:04 executing program 2: 01:51:04 executing program 5: 01:51:04 executing program 0: 01:51:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x88a8ffff00000000, &(0x7f0000000500)}, 0x0) 01:51:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:04 executing program 5: 01:51:04 executing program 0: 01:51:04 executing program 2: 01:51:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x88caffff00000000, &(0x7f0000000500)}, 0x0) 01:51:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:04 executing program 0: 01:51:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:05 executing program 5: 01:51:05 executing program 2: 01:51:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000330000006031409200443a00fe800000000000000000000000000000ff0200000000000000000000000000010000907800000000fe800000000000000000000000000000c8ef89dee0dbc44cea39fe9d058774946570c4136d32d0fa11167db81eb898cf0000000024f174a967e23896c94f77b50ac6cd099324bd56134f64ddff61abdef12cf5a85338bfb601ef729073ede8d667e13dffa0f0e917e79e82160f7fd649eb22bc62f109a37ea3e37f6fea8e6be94df43e984aa1ef8a44ee100ca516641cc4f025f8f19a83d51bd616507036b3ca8fa4b6a598865ee167"], 0x1) 01:51:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x8906000000000000, &(0x7f0000000500)}, 0x0) 01:51:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400, 0x0) 01:51:05 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) [ 640.149645][T26862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 640.166749][T26862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 640.180679][T26862] device team0 left promiscuous mode [ 640.186163][T26862] device team_slave_0 left promiscuous mode [ 640.192787][T26862] device team_slave_1 left promiscuous mode [ 640.201506][T26862] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.256781][T26862] net_ratelimit: 19 callbacks suppressed [ 640.256790][T26862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:51:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xc405000000000000, &(0x7f0000000500)}, 0x0) 01:51:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x19, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000180)="fd", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0xe400000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f00000003c0), 0x0}, 0x18) 01:51:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x0, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 640.351897][T26862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 640.394755][T26862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 01:51:05 executing program 0: r0 = socket(0x200000000000011, 0x802, 0x4000000dd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x40000) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="9567b61192652caac414a8cb5f795de51e456332fc8293aecc5c05f01c3106674cf8cf0000000000", 0x28}], 0x1) [ 640.607967][T26890] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.634636][T26890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 640.690422][T26890] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.725975][T26890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 640.736417][T26890] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.746045][T26890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 640.760494][T26890] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.769248][T26890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 640.840771][T26907] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.849878][T26907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 640.867454][T26907] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.898831][T26907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 640.909788][T26907] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 640.922014][T26907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 640.932733][T26907] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 01:51:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x19, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000180)="fd", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0xe400000000000000, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f00000003c0), 0x0}, 0x18) 01:51:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xc805000000000000, &(0x7f0000000500)}, 0x0) 01:51:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) accept$nfc_llcp(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x60) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$RTC_PIE_OFF(r2, 0x7006) [ 640.948068][T26907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 01:51:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 01:51:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:51:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) accept$nfc_llcp(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x60) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$RTC_PIE_OFF(r2, 0x7006) 01:51:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xeffdffff00000000, &(0x7f0000000500)}, 0x0) 01:51:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 641.174477][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 641.180289][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:51:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xffffff7f00000000, &(0x7f0000000500)}, 0x0) 01:51:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) accept$nfc_llcp(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x60) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$RTC_PIE_OFF(r2, 0x7006) 01:51:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:51:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 641.884483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 641.886305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 641.890373][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 641.897445][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 641.908282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 641.914414][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:51:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xffffffff00000000, &(0x7f0000000500)}, 0x0) 01:51:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(0x0, 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0xffffffffa0008000, &(0x7f0000000500)}, 0x0) 01:51:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:07 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 01:51:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500), 0x4}, 0x0) 01:51:07 executing program 2 (fault-call:26 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:51:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:07 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 642.855096][T27010] FAULT_INJECTION: forcing a failure. [ 642.855096][T27010] name failslab, interval 1, probability 0, space 0, times 0 [ 642.867839][T27010] CPU: 1 PID: 27010 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190116 #13 [ 642.876855][T27010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.886909][T27010] Call Trace: [ 642.890200][T27010] dump_stack+0x1db/0x2d0 [ 642.894516][T27010] ? dump_stack_print_info.cold+0x20/0x20 [ 642.900244][T27010] should_fail.cold+0xa/0x14 [ 642.904821][T27010] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 642.910626][T27010] ? ___might_sleep+0x1e7/0x310 [ 642.915488][T27010] ? arch_local_save_flags+0x50/0x50 [ 642.920787][T27010] __should_failslab+0x121/0x190 [ 642.925745][T27010] should_failslab+0x9/0x14 [ 642.930265][T27010] kmem_cache_alloc+0x2be/0x710 [ 642.935117][T27010] getname_flags+0xd6/0x5b0 [ 642.939604][T27010] do_mkdirat+0xba/0x2f0 [ 642.943837][T27010] ? __ia32_sys_mknod+0xb0/0xb0 [ 642.948685][T27010] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.954749][T27010] ? trace_hardirqs_off_caller+0x300/0x300 [ 642.960558][T27010] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 642.966024][T27010] __x64_sys_mkdirat+0x76/0xb0 [ 642.970788][T27010] do_syscall_64+0x1a3/0x800 [ 642.975383][T27010] ? syscall_return_slowpath+0x5f0/0x5f0 [ 642.981018][T27010] ? prepare_exit_to_usermode+0x232/0x3b0 [ 642.986742][T27010] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 642.992297][T27010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 642.998183][T27010] RIP: 0033:0x457ec9 [ 643.002078][T27010] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 643.021702][T27010] RSP: 002b:00007f9db0d11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 643.030152][T27010] RAX: ffffffffffffffda RBX: 00007f9db0d11c90 RCX: 0000000000457ec9 [ 643.038121][T27010] RDX: 00000000000001ff RSI: 0000000020000280 RDI: ffffffffffffff9c [ 643.046093][T27010] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:51:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x0, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500), 0x8}, 0x0) [ 643.054062][T27010] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db0d126d4 [ 643.062034][T27010] R13: 00000000004c3b5f R14: 00000000004d6a40 R15: 000000000000000a 01:51:08 executing program 5 (fault-call:0 fault-nth:0): clone(0x10000000, 0x0, 0x0, 0x0, 0x0) 01:51:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500), 0xa}, 0x0) 01:51:08 executing program 2 (fault-call:26 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 01:51:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 01:51:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 643.535012][T27038] FAULT_INJECTION: forcing a failure. [ 643.535012][T27038] name failslab, interval 1, probability 0, space 0, times 0 [ 643.594744][T27038] CPU: 0 PID: 27038 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190116 #13 [ 643.603810][T27038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.613867][T27038] Call Trace: [ 643.617177][T27038] dump_stack+0x1db/0x2d0 [ 643.621525][T27038] ? dump_stack_print_info.cold+0x20/0x20 [ 643.627258][T27038] ? add_lock_to_list.isra.0+0x450/0x450 [ 643.632906][T27038] ? kasan_check_read+0x11/0x20 [ 643.637773][T27038] should_fail.cold+0xa/0x14 [ 643.642376][T27038] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 643.645404][T27043] FAULT_INJECTION: forcing a failure. [ 643.645404][T27043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.648194][T27038] ? ___might_sleep+0x1e7/0x310 [ 643.666217][T27038] ? arch_local_save_flags+0x50/0x50 [ 643.671509][T27038] ? lock_acquire+0x1db/0x570 [ 643.676190][T27038] ? _raw_spin_unlock_irq+0x28/0x90 [ 643.681392][T27038] __should_failslab+0x121/0x190 [ 643.686333][T27038] should_failslab+0x9/0x14 [ 643.690836][T27038] kmem_cache_alloc_node+0x265/0x710 [ 643.696115][T27038] ? print_usage_bug+0xd0/0xd0 [ 643.700959][T27038] copy_process+0x4088/0x8740 [ 643.705640][T27038] ? print_usage_bug+0xd0/0xd0 [ 643.710404][T27038] ? __lock_acquire+0x572/0x4a10 [ 643.715338][T27038] ? process_measurement+0x268/0x1be0 [ 643.720711][T27038] ? print_usage_bug+0xd0/0xd0 [ 643.725488][T27038] ? __lock_acquire+0x572/0x4a10 [ 643.730424][T27038] ? __lock_acquire+0x572/0x4a10 [ 643.735379][T27038] ? __cleanup_sighand+0x70/0x70 [ 643.740314][T27038] ? mark_held_locks+0x100/0x100 [ 643.745261][T27038] ? __lock_acquire+0x572/0x4a10 [ 643.750212][T27038] ? mark_held_locks+0x100/0x100 [ 643.755156][T27038] ? __might_fault+0x12b/0x1e0 [ 643.759924][T27038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.766162][T27038] ? _parse_integer+0x139/0x190 [ 643.771019][T27038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 643.777259][T27038] ? _kstrtoull+0x17d/0x250 [ 643.781763][T27038] ? add_lock_to_list.isra.0+0x450/0x450 [ 643.787393][T27038] ? lock_downgrade+0xbe0/0xbe0 [ 643.792300][T27038] ? add_lock_to_list.isra.0+0x450/0x450 [ 643.797930][T27038] ? __check_object_size+0xa3/0x790 [ 643.803125][T27038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.809364][T27038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.815611][T27038] ? check_preemption_disabled+0x48/0x290 [ 643.821334][T27038] ? get_pid_task+0xd4/0x190 [ 643.825924][T27038] ? find_held_lock+0x35/0x120 [ 643.830688][T27038] ? get_pid_task+0xd4/0x190 [ 643.835278][T27038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 643.841528][T27038] ? add_lock_to_list.isra.0+0x450/0x450 [ 643.847156][T27038] ? kasan_check_read+0x11/0x20 [ 643.852006][T27038] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 643.857986][T27038] ? rcu_read_unlock_special+0x380/0x380 [ 643.863627][T27038] ? __f_unlock_pos+0x19/0x20 [ 643.868304][T27038] ? find_held_lock+0x35/0x120 [ 643.873095][T27038] ? __f_unlock_pos+0x19/0x20 [ 643.877805][T27038] ? proc_fail_nth_write+0xa0/0x220 [ 643.883005][T27038] ? lock_downgrade+0xbe0/0xbe0 [ 643.887866][T27038] ? vfs_write+0x2f0/0x580 [ 643.892294][T27038] ? kasan_check_write+0x14/0x20 [ 643.897232][T27038] ? __mutex_unlock_slowpath+0x195/0x870 [ 643.902867][T27038] _do_fork+0x1a9/0x1170 [ 643.907120][T27038] ? fork_idle+0x1d0/0x1d0 [ 643.911552][T27038] ? __sb_end_write+0xd9/0x110 [ 643.916327][T27038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 643.922564][T27038] ? fput+0x128/0x1a0 [ 643.926551][T27038] ? do_syscall_64+0x8c/0x800 [ 643.931229][T27038] ? do_syscall_64+0x8c/0x800 [ 643.935903][T27038] ? lockdep_hardirqs_on+0x415/0x5d0 [ 643.941185][T27038] ? trace_hardirqs_on+0xbd/0x310 [ 643.946219][T27038] ? __ia32_sys_read+0xb0/0xb0 [ 643.950982][T27038] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.957048][T27038] ? trace_hardirqs_off_caller+0x300/0x300 [ 643.962861][T27038] __x64_sys_clone+0xbf/0x150 [ 643.967548][T27038] do_syscall_64+0x1a3/0x800 [ 643.972146][T27038] ? syscall_return_slowpath+0x5f0/0x5f0 [ 643.977777][T27038] ? prepare_exit_to_usermode+0x232/0x3b0 [ 643.983507][T27038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 643.989064][T27038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 643.994954][T27038] RIP: 0033:0x457ec9 [ 643.999279][T27038] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.018876][T27038] RSP: 002b:00007fe1fcaa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 644.027285][T27038] RAX: ffffffffffffffda RBX: 00007fe1fcaa2c90 RCX: 0000000000457ec9 [ 644.035250][T27038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 644.043215][T27038] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 644.051191][T27038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1fcaa36d4 [ 644.059155][T27038] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003 [ 644.067148][T27043] CPU: 1 PID: 27043 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190116 #13 [ 644.076172][T27043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.086224][T27043] Call Trace: [ 644.089539][T27043] dump_stack+0x1db/0x2d0 [ 644.093900][T27043] ? dump_stack_print_info.cold+0x20/0x20 [ 644.099626][T27043] ? add_lock_to_list.isra.0+0x450/0x450 [ 644.105260][T27043] ? lock_downgrade+0xbe0/0xbe0 [ 644.110128][T27043] should_fail.cold+0xa/0x14 [ 644.114732][T27043] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 644.120539][T27043] ? get_pid_task+0xd4/0x190 [ 644.125136][T27043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.131385][T27043] ? add_lock_to_list.isra.0+0x450/0x450 [ 644.137026][T27043] ? kasan_check_read+0x11/0x20 [ 644.141889][T27043] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 644.148090][T27043] should_fail_alloc_page+0x50/0x60 [ 644.153294][T27043] __alloc_pages_nodemask+0x323/0xdc0 [ 644.158681][T27043] ? find_held_lock+0x35/0x120 [ 644.163451][T27043] ? __alloc_pages_slowpath+0x2c60/0x2c60 [ 644.169185][T27043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.175443][T27043] ? ___might_sleep+0x1e7/0x310 [ 644.180316][T27043] ? trace_hardirqs_off+0xb8/0x310 [ 644.185442][T27043] cache_grow_begin+0x9c/0x8c0 [ 644.190225][T27043] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 644.196486][T27043] ? check_preemption_disabled+0x48/0x290 [ 644.202215][T27043] kmem_cache_alloc+0x645/0x710 [ 644.207086][T27043] getname_flags+0xd6/0x5b0 [ 644.211609][T27043] do_mkdirat+0xba/0x2f0 [ 644.215856][T27043] ? __ia32_sys_mknod+0xb0/0xb0 [ 644.220710][T27043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.226782][T27043] ? trace_hardirqs_off_caller+0x300/0x300 [ 644.232592][T27043] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 644.238059][T27043] __x64_sys_mkdirat+0x76/0xb0 [ 644.242835][T27043] do_syscall_64+0x1a3/0x800 [ 644.247430][T27043] ? syscall_return_slowpath+0x5f0/0x5f0 [ 644.253081][T27043] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 644.258802][T27043] ? __switch_to_asm+0x34/0x70 [ 644.263577][T27043] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 644.269139][T27043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.275028][T27043] RIP: 0033:0x457ec9 01:51:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500), 0xe}, 0x0) 01:51:09 executing program 5 (fault-call:0 fault-nth:1): clone(0x10000000, 0x0, 0x0, 0x0, 0x0) [ 644.278923][T27043] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.298529][T27043] RSP: 002b:00007f9db0cf0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 644.306937][T27043] RAX: ffffffffffffffda RBX: 00007f9db0cf0c90 RCX: 0000000000457ec9 [ 644.315022][T27043] RDX: 00000000000001ff RSI: 0000000020000280 RDI: ffffffffffffff9c [ 644.322993][T27043] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 644.330979][T27043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9db0cf16d4 [ 644.338962][T27043] R13: 00000000004c3b5f R14: 00000000004d6a40 R15: 000000000000000a 01:51:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x2) [ 644.497187][T27055] FAULT_INJECTION: forcing a failure. [ 644.497187][T27055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.534590][T27055] CPU: 0 PID: 27055 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190116 #13 [ 644.543627][T27055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.553673][T27055] Call Trace: [ 644.556970][T27055] dump_stack+0x1db/0x2d0 [ 644.556992][T27055] ? dump_stack_print_info.cold+0x20/0x20 [ 644.557024][T27055] should_fail.cold+0xa/0x14 [ 644.567050][T27055] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 644.577420][T27055] ? arch_local_save_flags+0x50/0x50 [ 644.577443][T27055] ? lock_release+0xc40/0xc40 [ 644.577485][T27055] should_fail_alloc_page+0x50/0x60 [ 644.587415][T27055] __alloc_pages_nodemask+0x323/0xdc0 [ 644.587440][T27055] ? __alloc_pages_slowpath+0x2c60/0x2c60 [ 644.587455][T27055] ? rcu_pm_notify+0xd0/0xd0 [ 644.587490][T27055] ? rcu_read_lock_sched_held+0x110/0x130 [ 644.598056][T27055] ? kmem_cache_alloc_node+0x347/0x710 [ 644.598070][T27055] ? print_usage_bug+0xd0/0xd0 [ 644.598099][T27055] copy_process+0x847/0x8740 [ 644.598118][T27055] ? print_usage_bug+0xd0/0xd0 [ 644.608401][T27055] ? __lock_acquire+0x572/0x4a10 [ 644.619539][T27055] ? process_measurement+0x268/0x1be0 [ 644.619557][T27055] ? print_usage_bug+0xd0/0xd0 [ 644.619584][T27055] ? __lock_acquire+0x572/0x4a10 [ 644.619602][T27055] ? __lock_acquire+0x572/0x4a10 [ 644.628933][T27055] ? __cleanup_sighand+0x70/0x70 [ 644.638584][T27055] ? mark_held_locks+0x100/0x100 [ 644.638608][T27055] ? __lock_acquire+0x572/0x4a10 [ 644.638639][T27055] ? mark_held_locks+0x100/0x100 [ 644.648741][T27055] ? __might_fault+0x12b/0x1e0 [ 644.658583][T27055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.658600][T27055] ? _parse_integer+0x139/0x190 [ 644.658621][T27055] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 644.658640][T27055] ? _kstrtoull+0x17d/0x250 [ 644.668501][T27055] ? add_lock_to_list.isra.0+0x450/0x450 [ 644.678330][T27055] ? lock_downgrade+0xbe0/0xbe0 [ 644.678347][T27055] ? add_lock_to_list.isra.0+0x450/0x450 [ 644.678362][T27055] ? __check_object_size+0xa3/0x790 [ 644.678377][T27055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.678397][T27055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.704938][T27055] ? check_preemption_disabled+0x48/0x290 [ 644.715408][T27055] ? get_pid_task+0xd4/0x190 [ 644.715424][T27055] ? find_held_lock+0x35/0x120 [ 644.715439][T27055] ? get_pid_task+0xd4/0x190 [ 644.715473][T27055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 644.726303][T27055] ? add_lock_to_list.isra.0+0x450/0x450 [ 644.726335][T27055] ? kasan_check_read+0x11/0x20 [ 644.726368][T27055] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 644.726386][T27055] ? rcu_read_unlock_special+0x380/0x380 [ 644.726407][T27055] ? __f_unlock_pos+0x19/0x20 [ 644.726423][T27055] ? find_held_lock+0x35/0x120 [ 644.726439][T27055] ? __f_unlock_pos+0x19/0x20 [ 644.726458][T27055] ? proc_fail_nth_write+0xa0/0x220 [ 644.726487][T27055] ? lock_downgrade+0xbe0/0xbe0 [ 644.726505][T27055] ? vfs_write+0x2f0/0x580 [ 644.726533][T27055] ? kasan_check_write+0x14/0x20 [ 644.726551][T27055] ? __mutex_unlock_slowpath+0x195/0x870 [ 644.726580][T27055] _do_fork+0x1a9/0x1170 [ 644.726604][T27055] ? fork_idle+0x1d0/0x1d0 [ 644.726624][T27055] ? __sb_end_write+0xd9/0x110 01:51:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500), 0x11}, 0x0) 01:51:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 01:51:10 executing program 5 (fault-call:0 fault-nth:2): clone(0x10000000, 0x0, 0x0, 0x0, 0x0) [ 644.726645][T27055] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 644.726667][T27055] ? fput+0x128/0x1a0 [ 644.739125][T27055] ? do_syscall_64+0x8c/0x800 [ 644.754235][T27055] ? do_syscall_64+0x8c/0x800 [ 644.754252][T27055] ? lockdep_hardirqs_on+0x415/0x5d0 [ 644.754269][T27055] ? trace_hardirqs_on+0xbd/0x310 [ 644.754285][T27055] ? __ia32_sys_read+0xb0/0xb0 [ 644.754304][T27055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.754321][T27055] ? trace_hardirqs_off_caller+0x300/0x300 [ 644.754343][T27055] __x64_sys_clone+0xbf/0x150 [ 644.765158][T27055] do_syscall_64+0x1a3/0x800 [ 644.765178][T27055] ? syscall_return_slowpath+0x5f0/0x5f0 [ 644.765196][T27055] ? prepare_exit_to_usermode+0x232/0x3b0 [ 644.765218][T27055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 644.775672][T27055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 644.775685][T27055] RIP: 0033:0x457ec9 [ 644.775705][T27055] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 644.787273][T27055] RSP: 002b:00007fe1fcaa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 644.787288][T27055] RAX: ffffffffffffffda RBX: 00007fe1fcaa2c90 RCX: 0000000000457ec9 [ 644.787297][T27055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 644.787313][T27055] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 644.796710][T27055] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1fcaa36d4 [ 644.796720][T27055] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003 [ 645.058619][T27065] FAULT_INJECTION: forcing a failure. [ 645.058619][T27065] name failslab, interval 1, probability 0, space 0, times 0 01:51:10 executing program 2 (fault-call:26 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) [ 645.125460][T27065] CPU: 1 PID: 27065 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190116 #13 [ 645.134552][T27065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.144624][T27065] Call Trace: [ 645.147934][T27065] dump_stack+0x1db/0x2d0 [ 645.152292][T27065] ? dump_stack_print_info.cold+0x20/0x20 [ 645.158075][T27065] should_fail.cold+0xa/0x14 [ 645.162687][T27065] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 645.168525][T27065] ? ___might_sleep+0x1e7/0x310 [ 645.173406][T27065] ? arch_local_save_flags+0x50/0x50 [ 645.178745][T27065] __should_failslab+0x121/0x190 [ 645.183716][T27065] should_failslab+0x9/0x14 [ 645.188226][T27065] kmem_cache_alloc+0x2be/0x710 [ 645.193093][T27065] ? rcu_read_lock_sched_held+0x110/0x130 [ 645.198820][T27065] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 645.205083][T27065] prepare_creds+0xa4/0x510 [ 645.209599][T27065] ? abort_creds+0x2c0/0x2c0 [ 645.214201][T27065] ? copy_process+0xb3c/0x8740 [ 645.218972][T27065] ? trace_hardirqs_off_caller+0x300/0x300 [ 645.224790][T27065] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 645.231042][T27065] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 645.237295][T27065] ? check_preemption_disabled+0x48/0x290 [ 645.243032][T27065] copy_creds+0x7b/0x6c0 [ 645.243058][T27065] copy_process+0x114d/0x8740 [ 645.243083][T27065] ? print_usage_bug+0xd0/0xd0 [ 645.243098][T27065] ? __lock_acquire+0x572/0x4a10 [ 645.243117][T27065] ? process_measurement+0x268/0x1be0 [ 645.243136][T27065] ? print_usage_bug+0xd0/0xd0 [ 645.243163][T27065] ? __lock_acquire+0x572/0x4a10 [ 645.261730][T27065] ? __lock_acquire+0x572/0x4a10 [ 645.261768][T27065] ? __cleanup_sighand+0x70/0x70 [ 645.261784][T27065] ? mark_held_locks+0x100/0x100 [ 645.261806][T27065] ? __lock_acquire+0x572/0x4a10 [ 645.282298][T27065] ? mark_held_locks+0x100/0x100 [ 645.282325][T27065] ? __might_fault+0x12b/0x1e0 [ 645.282343][T27065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.282359][T27065] ? _parse_integer+0x139/0x190 [ 645.282380][T27065] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 01:51:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c80) [ 645.292592][T27065] ? _kstrtoull+0x17d/0x250 [ 645.292612][T27065] ? add_lock_to_list.isra.0+0x450/0x450 [ 645.292627][T27065] ? lock_downgrade+0xbe0/0xbe0 [ 645.292643][T27065] ? add_lock_to_list.isra.0+0x450/0x450 [ 645.292659][T27065] ? __check_object_size+0xa3/0x790 [ 645.292674][T27065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.292690][T27065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.292708][T27065] ? check_preemption_disabled+0x48/0x290 [ 645.292727][T27065] ? get_pid_task+0xd4/0x190 [ 645.307948][T27065] ? find_held_lock+0x35/0x120 [ 645.307964][T27065] ? get_pid_task+0xd4/0x190 [ 645.307984][T27065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.308006][T27065] ? add_lock_to_list.isra.0+0x450/0x450 [ 645.308024][T27065] ? kasan_check_read+0x11/0x20 [ 645.308042][T27065] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 645.308063][T27065] ? rcu_read_unlock_special+0x380/0x380 [ 645.308092][T27065] ? __f_unlock_pos+0x19/0x20 [ 645.308109][T27065] ? find_held_lock+0x35/0x120 [ 645.308126][T27065] ? __f_unlock_pos+0x19/0x20 [ 645.308147][T27065] ? proc_fail_nth_write+0xa0/0x220 [ 645.366616][T27065] ? lock_downgrade+0xbe0/0xbe0 [ 645.366638][T27065] ? vfs_write+0x2f0/0x580 [ 645.366668][T27065] ? kasan_check_write+0x14/0x20 [ 645.376973][T27065] ? __mutex_unlock_slowpath+0x195/0x870 [ 645.377012][T27065] _do_fork+0x1a9/0x1170 [ 645.377059][T27065] ? fork_idle+0x1d0/0x1d0 [ 645.377087][T27065] ? __sb_end_write+0xd9/0x110 [ 645.377108][T27065] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 645.377123][T27065] ? fput+0x128/0x1a0 [ 645.377138][T27065] ? do_syscall_64+0x8c/0x800 [ 645.377153][T27065] ? do_syscall_64+0x8c/0x800 [ 645.377168][T27065] ? lockdep_hardirqs_on+0x415/0x5d0 [ 645.377188][T27065] ? trace_hardirqs_on+0xbd/0x310 [ 645.497322][T27065] ? __ia32_sys_read+0xb0/0xb0 [ 645.502074][T27065] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.508134][T27065] ? trace_hardirqs_off_caller+0x300/0x300 [ 645.513933][T27065] __x64_sys_clone+0xbf/0x150 [ 645.518617][T27065] do_syscall_64+0x1a3/0x800 [ 645.523220][T27065] ? syscall_return_slowpath+0x5f0/0x5f0 [ 645.528874][T27065] ? prepare_exit_to_usermode+0x232/0x3b0 [ 645.534604][T27065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 645.540157][T27065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.546052][T27065] RIP: 0033:0x457ec9 [ 645.549951][T27065] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.569559][T27065] RSP: 002b:00007fe1fcaa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 645.577961][T27065] RAX: ffffffffffffffda RBX: 00007fe1fcaa2c90 RCX: 0000000000457ec9 [ 645.585932][T27065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 645.593894][T27065] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 645.601846][T27065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1fcaa36d4 [ 645.609805][T27065] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003 [ 645.618089][ C1] net_ratelimit: 12 callbacks suppressed 01:51:10 executing program 5 (fault-call:0 fault-nth:3): clone(0x10000000, 0x0, 0x0, 0x0, 0x0) 01:51:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="1405000000830000000002f2ddffffffffac141412cb51184c6c38a878ea79c60782b60e19da7736667f00825a0b28839d4d3b735ed4e2a4978b2212946b8b5584c21e46182a93b5564c39726e1b90a500000000000800000000000008b20107c422387f01a78570244af5cb288ebd975d53c7f6d5283cabc9657574bcc002b3f57ed1ea0baebf763b9e107c66d376d03cdd3ff57331e29e9023367371508971b072e543dbac6320838d9bca061aae3ab8137cec2a8209fca44df45ebe199ff813e2b83d6379c90f9a5d82fbbbf7a9010000000000dd00390dcba068f0e2f04ed7c3e0da12af8b998c0bc1b2fb70762439f3a676966de10b8998de9b517f978d1ecd0319d9d5e2ee90cbf8d2e801c78ef4c87cafc8954c30af6e0bd7d2fdcd7c3abc437e1f909baff4bf7a316587251c63"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 645.618096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 645.629585][ C1] protocol 88fb is buggy, dev hsr_slave_1 01:51:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000500), 0x18}, 0x0) [ 645.828460][T27084] FAULT_INJECTION: forcing a failure. [ 645.828460][T27084] name failslab, interval 1, probability 0, space 0, times 0 01:51:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) setgid(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 645.911753][T27084] CPU: 0 PID: 27084 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190116 #13 [ 645.920903][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.930972][T27084] Call Trace: [ 645.934295][T27084] dump_stack+0x1db/0x2d0 [ 645.938678][T27084] ? dump_stack_print_info.cold+0x20/0x20 [ 645.944410][T27084] ? prepare_creds+0xa4/0x510 [ 645.949095][T27084] ? copy_creds+0x7b/0x6c0 [ 645.953533][T27084] ? copy_process+0x114d/0x8740 [ 645.958389][T27084] ? _do_fork+0x1a9/0x1170 [ 645.962810][T27084] ? __x64_sys_clone+0xbf/0x150 [ 645.967669][T27084] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.973749][T27084] should_fail.cold+0xa/0x14 [ 645.978357][T27084] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 645.984195][T27084] ? ___might_sleep+0x1e7/0x310 [ 645.989078][T27084] ? arch_local_save_flags+0x50/0x50 [ 645.994388][T27084] ? check_preemption_disabled+0x48/0x290 [ 646.000129][T27084] __should_failslab+0x121/0x190 [ 646.005084][T27084] should_failslab+0x9/0x14 [ 646.009605][T27084] __kmalloc+0x2dc/0x740 [ 646.013857][T27084] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 646.019667][T27084] ? prepare_creds+0xa4/0x510 [ 646.024351][T27084] ? prepare_creds+0xa4/0x510 [ 646.029054][T27084] ? security_prepare_creds+0x123/0x190 [ 646.034614][T27084] security_prepare_creds+0x123/0x190 [ 646.040004][T27084] prepare_creds+0x3c4/0x510 [ 646.044608][T27084] ? abort_creds+0x2c0/0x2c0 [ 646.049203][T27084] ? copy_process+0xb3c/0x8740 [ 646.053973][T27084] ? trace_hardirqs_off_caller+0x300/0x300 [ 646.059807][T27084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 646.066052][T27084] ? check_preemption_disabled+0x48/0x290 [ 646.071788][T27084] copy_creds+0x7b/0x6c0 [ 646.076048][T27084] copy_process+0x114d/0x8740 [ 646.080735][T27084] ? print_usage_bug+0xd0/0xd0 [ 646.085510][T27084] ? __lock_acquire+0x572/0x4a10 [ 646.090456][T27084] ? process_measurement+0x268/0x1be0 [ 646.095848][T27084] ? print_usage_bug+0xd0/0xd0 [ 646.100628][T27084] ? __lock_acquire+0x572/0x4a10 [ 646.105585][T27084] ? __lock_acquire+0x572/0x4a10 [ 646.110550][T27084] ? __cleanup_sighand+0x70/0x70 [ 646.115502][T27084] ? mark_held_locks+0x100/0x100 [ 646.120451][T27084] ? __lock_acquire+0x572/0x4a10 [ 646.125436][T27084] ? mark_held_locks+0x100/0x100 [ 646.130401][T27084] ? __might_fault+0x12b/0x1e0 [ 646.135171][T27084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.141415][T27084] ? _parse_integer+0x139/0x190 [ 646.146677][T27084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 646.152924][T27084] ? _kstrtoull+0x17d/0x250 [ 646.157436][T27084] ? add_lock_to_list.isra.0+0x450/0x450 [ 646.163085][T27084] ? lock_downgrade+0xbe0/0xbe0 [ 646.167942][T27084] ? add_lock_to_list.isra.0+0x450/0x450 [ 646.173591][T27084] ? __check_object_size+0xa3/0x790 [ 646.178800][T27084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.185052][T27084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.191302][T27084] ? check_preemption_disabled+0x48/0x290 [ 646.197033][T27084] ? get_pid_task+0xd4/0x190 [ 646.197438][T27107] cgroup: fork rejected by pids controller in /syz0 [ 646.201630][T27084] ? find_held_lock+0x35/0x120 [ 646.201647][T27084] ? get_pid_task+0xd4/0x190 [ 646.201667][T27084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.201689][T27084] ? add_lock_to_list.isra.0+0x450/0x450 [ 646.201712][T27084] ? kasan_check_read+0x11/0x20 [ 646.234308][T27084] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 646.240301][T27084] ? rcu_read_unlock_special+0x380/0x380 [ 646.245952][T27084] ? __f_unlock_pos+0x19/0x20 [ 646.250639][T27084] ? find_held_lock+0x35/0x120 [ 646.255409][T27084] ? __f_unlock_pos+0x19/0x20 [ 646.260093][T27084] ? proc_fail_nth_write+0xa0/0x220 [ 646.265303][T27084] ? lock_downgrade+0xbe0/0xbe0 [ 646.270178][T27084] ? vfs_write+0x2f0/0x580 [ 646.274622][T27084] ? kasan_check_write+0x14/0x20 [ 646.279582][T27084] ? __mutex_unlock_slowpath+0x195/0x870 [ 646.285228][T27084] _do_fork+0x1a9/0x1170 [ 646.289493][T27084] ? fork_idle+0x1d0/0x1d0 [ 646.293924][T27084] ? __sb_end_write+0xd9/0x110 [ 646.298699][T27084] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 646.304943][T27084] ? fput+0x128/0x1a0 [ 646.308930][T27084] ? do_syscall_64+0x8c/0x800 [ 646.313611][T27084] ? do_syscall_64+0x8c/0x800 [ 646.318290][T27084] ? lockdep_hardirqs_on+0x415/0x5d0 [ 646.323589][T27084] ? trace_hardirqs_on+0xbd/0x310 [ 646.328617][T27084] ? __ia32_sys_read+0xb0/0xb0 [ 646.333390][T27084] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.339462][T27084] ? trace_hardirqs_off_caller+0x300/0x300 [ 646.345292][T27084] __x64_sys_clone+0xbf/0x150 [ 646.349980][T27084] do_syscall_64+0x1a3/0x800 [ 646.354584][T27084] ? syscall_return_slowpath+0x5f0/0x5f0 [ 646.360230][T27084] ? prepare_exit_to_usermode+0x232/0x3b0 [ 646.365962][T27084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 646.371528][T27084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.377424][T27084] RIP: 0033:0x457ec9 [ 646.381332][T27084] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.400943][T27084] RSP: 002b:00007fe1fcaa2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 646.409361][T27084] RAX: ffffffffffffffda RBX: 00007fe1fcaa2c90 RCX: 0000000000457ec9 [ 646.417337][T27084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000010000000 [ 646.425310][T27084] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 646.433307][T27084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1fcaa36d4 [ 646.441296][T27084] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003 [ 646.449640][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 646.455382][ C1] protocol 88fb is buggy, dev hsr_slave_0 01:51:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c81) 01:51:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5421) 01:51:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5450) 01:51:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5451) 01:51:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5452) 01:51:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x5460) 01:51:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r3 = syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) pipe2$9p(&(0x7f0000000200), 0x800) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgrou\xd9\xb6\xa3\x00\x00\x00\x80\x00\x00\x00\x00', 0x1ff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) [ 646.455438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 646.461158][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 646.472745][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 646.478581][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 646.484523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 646.490301][ C0] protocol 88fb is buggy, dev hsr_slave_1 01:51:11 executing program 5 (fault-call:0 fault-nth:4): clone(0x10000000, 0x0, 0x0, 0x0, 0x0) [ 646.574424][ C1] ------------[ cut here ]------------ [ 646.580147][ C1] AppArmor WARN cred_label: ((!blob)): [ 646.580413][ C1] WARNING: CPU: 1 PID: 9752 at security/apparmor/include/cred.h:30 apparmor_cred_free+0x12f/0x1a0 [ 646.596530][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 646.603121][ C1] CPU: 1 PID: 9752 Comm: kworker/u4:7 Not tainted 5.0.0-rc2-next-20190116 #13 [ 646.611950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.616244][T27113] kobject: 'iosched' (00000000f8c7c214): kobject_cleanup, parent (null) [ 646.622101][ C1] Workqueue: bat_events batadv_purge_orig [ 646.622111][ C1] Call Trace: [ 646.622118][ C1] [ 646.622135][ C1] dump_stack+0x1db/0x2d0 [ 646.622154][ C1] ? dump_stack_print_info.cold+0x20/0x20 [ 646.622178][ C1] ? apparmor_cred_free+0xc0/0x1a0 [ 646.622194][ C1] panic+0x2cb/0x65c [ 646.622217][ C1] ? add_taint.cold+0x16/0x16 [ 646.631815][T27113] kobject: 'iosched' (00000000f8c7c214): calling ktype release [ 646.637108][ C1] ? apparmor_cred_free+0x12f/0x1a0 [ 646.637123][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.637137][ C1] ? __probe_kernel_read+0x1f4/0x250 [ 646.637154][ C1] ? __warn.cold+0x5/0x48 [ 646.637167][ C1] ? __warn+0xe8/0x1d0 [ 646.637182][ C1] ? apparmor_cred_free+0x12f/0x1a0 [ 646.637197][ C1] __warn.cold+0x20/0x48 [ 646.637212][ C1] ? apparmor_cred_free+0x12f/0x1a0 [ 646.637226][ C1] report_bug+0x263/0x2b0 [ 646.637246][ C1] do_error_trap+0x11b/0x200 [ 646.637265][ C1] do_invalid_op+0x37/0x50 [ 646.637276][ C1] ? apparmor_cred_free+0x12f/0x1a0 [ 646.637299][ C1] invalid_op+0x14/0x20 [ 646.640870][T27113] kobject: 'iosched': free name [ 646.643406][ C1] RIP: 0010:apparmor_cred_free+0x12f/0x1a0 [ 646.643420][ C1] Code: 7c 88 48 c7 c7 40 d2 7c 88 e8 ed 08 f2 fd 0f 0b eb a9 e8 f4 df 28 fe 48 c7 c6 00 e2 7c 88 48 c7 c7 40 d2 7c 88 e8 d1 08 f2 fd <0f> 0b 48 b8 00 00 00 00 00 fc ff df 80 38 00 75 4a 4c 8b 2c 25 00 [ 646.643428][ C1] RSP: 0018:ffff8880ae707b10 EFLAGS: 00010286 01:51:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f000002efe2)=[{}], 0x1) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x7}, 0x7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(0xffffffffffffffff, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/.yz1\x0f', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 646.643439][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 646.643448][ C1] RDX: 0000000000000100 RSI: ffffffff81688726 RDI: 0000000000000006 [ 646.643457][ C1] RBP: ffff8880ae707b30 R08: ffff8880521c4600 R09: ffff8880521c4ec8 [ 646.643475][ C1] R10: ffff8880521c4600 R11: 0000000000000000 R12: ffff8880935f7000 [ 646.643484][ C1] R13: ffff8880935f7000 R14: ffff8880935f7088 R15: dffffc0000000000 [ 646.643512][ C1] ? vprintk_func+0x86/0x189 [ 646.643536][ C1] security_cred_free+0x4b/0xf0 [ 646.643554][ C1] put_cred_rcu+0x21f/0x6e0 [ 646.643582][ C1] ? get_task_cred+0x5e0/0x5e0 [ 646.650736][T27113] kobject: 'loop5' (00000000ab37dd24): kobject_cleanup, parent (null) [ 646.653597][ C1] ? lock_release+0xc40/0xc40 [ 646.653617][ C1] ? __do_softirq+0x30b/0xb11 [ 646.653634][ C1] ? trace_hardirqs_off_caller+0x300/0x300 [ 646.653650][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.653667][ C1] ? check_preemption_disabled+0x48/0x290 [ 646.653688][ C1] rcu_core+0xc4a/0x1680 [ 646.653712][ C1] ? rcu_fwd_progress_check+0xd0/0xd0 [ 646.663106][T27113] kobject: 'loop5' (00000000ab37dd24): calling ktype release [ 646.667433][ C1] ? kvm_clock_read+0x18/0x30 [ 646.667455][ C1] ? add_lock_to_list.isra.0+0x450/0x450 [ 646.675201][T27113] kobject: 'queue' (000000006478ee1c): kobject_cleanup, parent (null) [ 646.680175][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.680189][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.680211][ C1] ? check_preemption_disabled+0x48/0x290 [ 646.680232][ C1] ? __lock_is_held+0xb6/0x140 [ 646.686630][T27113] kobject: 'queue' (000000006478ee1c): calling ktype release [ 646.691746][ C1] __do_softirq+0x30b/0xb11 [ 646.691761][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.691791][ C1] ? __irqentry_text_end+0x1f96d2/0x1f96d2 [ 646.696301][T27113] kobject: 'queue': free name [ 646.700151][ C1] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 646.700168][ C1] ? trace_hardirqs_off+0x310/0x310 [ 646.700180][ C1] ? task_prio+0x50/0x50 [ 646.700193][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.700214][ C1] ? check_preemption_disabled+0x48/0x290 [ 646.705484][T17952] kobject: '0' (0000000050bc7998): kobject_cleanup, parent (null) [ 646.709624][ C1] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 646.714993][T17952] kobject: '0' (0000000050bc7998): calling ktype release [ 646.719120][ C1] ? batadv_purge_orig_ref+0xcc6/0x13c0 [ 646.719136][ C1] do_softirq_own_stack+0x2a/0x40 [ 646.719143][ C1] [ 646.719157][ C1] do_softirq.part.0+0x11a/0x170 [ 646.719177][ C1] __local_bh_enable_ip+0x211/0x270 [ 646.723844][T17952] kobject: '0': free name [ 646.728142][ C1] _raw_spin_unlock_bh+0x31/0x40 [ 646.728158][ C1] batadv_purge_orig_ref+0xcc6/0x13c0 [ 646.728180][ C1] ? trace_hardirqs_off+0xb8/0x310 [ 646.728195][ C1] ? kasan_check_read+0x11/0x20 [ 646.728210][ C1] ? do_raw_spin_unlock+0xa0/0x330 [ 646.728230][ C1] ? batadv_orig_node_new+0x9f0/0x9f0 [ 646.733552][T27113] kobject: 'loop5': free name [ 646.737539][ C1] ? find_held_lock+0x35/0x120 [ 646.737556][ C1] ? add_lock_to_list.isra.0+0x450/0x450 [ 646.737569][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.737581][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 646.737597][ C1] ? check_preemption_disabled+0x48/0x290 [ 646.737620][ C1] ? __lock_is_held+0xb6/0x140 [ 646.737646][ C1] batadv_purge_orig+0x1b/0x70 [ 646.737662][ C1] process_one_work+0xd0c/0x1ce0 [ 646.737684][ C1] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 646.742652][T17952] kobject: 'cpu0' (0000000008708cb4): kobject_cleanup, parent (null) [ 646.748303][ C1] ? __switch_to_asm+0x34/0x70 [ 646.748331][ C1] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 646.748345][ C1] ? __schedule+0x89f/0x1e60 [ 646.748367][ C1] ? pci_mmcfg_check_reserved+0x170/0x170 [ 646.748379][ C1] ? worker_thread+0x3b7/0x14a0 [ 646.748400][ C1] ? worker_thread+0x3b7/0x14a0 [ 646.748411][ C1] ? find_held_lock+0x35/0x120 [ 646.748430][ C1] ? lock_acquire+0x1db/0x570 [ 646.785040][T17952] kobject: 'cpu0' (0000000008708cb4): calling ktype release [ 646.789988][ C1] ? worker_thread+0x3cd/0x14a0 [ 646.790010][ C1] ? kasan_check_write+0x14/0x20 [ 646.790025][ C1] ? do_raw_spin_lock+0x156/0x360 [ 646.790037][ C1] ? lock_release+0xc40/0xc40 [ 646.790052][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 646.790078][ C1] ? trace_hardirqs_on_caller+0x310/0x310 [ 646.815626][T17952] kobject: 'cpu0': free name [ 646.818585][ C1] worker_thread+0x143/0x14a0 [ 646.818618][ C1] ? process_one_work+0x1ce0/0x1ce0 [ 646.818631][ C1] ? __kthread_parkme+0xc3/0x1b0 [ 646.818650][ C1] ? lock_acquire+0x1db/0x570 [ 646.823637][T17952] kobject: 'cpu1' (00000000e0bfed68): kobject_cleanup, parent (null) [ 646.827992][ C1] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 646.828008][ C1] ? lockdep_hardirqs_on+0x415/0x5d0 [ 646.828022][ C1] ? trace_hardirqs_on+0xbd/0x310 [ 646.828037][ C1] ? __kthread_parkme+0xc3/0x1b0 [ 646.828051][ C1] ? trace_hardirqs_off_caller+0x300/0x300 [ 646.828065][ C1] ? do_raw_spin_trylock+0x270/0x270 [ 646.828085][ C1] ? schedule+0x108/0x350 [ 646.828099][ C1] ? do_raw_spin_trylock+0x270/0x270 [ 646.828120][ C1] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 646.833007][T17952] kobject: 'cpu1' (00000000e0bfed68): calling ktype release [ 646.841862][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 646.841875][ C1] ? __kthread_parkme+0xfb/0x1b0 [ 646.841893][ C1] kthread+0x357/0x430 [ 646.841908][ C1] ? process_one_work+0x1ce0/0x1ce0 [ 646.841920][ C1] ? kthread_stop+0x920/0x920 [ 646.841937][ C1] ret_from_fork+0x3a/0x50 [ 646.847608][ C1] Kernel Offset: disabled [ 647.324032][ C1] Rebooting in 86400 seconds..