[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.098378][ T26] audit: type=1800 audit(1566845748.049:25): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.141242][ T26] audit: type=1800 audit(1566845748.059:26): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.174786][ T26] audit: type=1800 audit(1566845748.059:27): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.170' (ECDSA) to the list of known hosts. 2019/08/26 18:55:56 fuzzer started 2019/08/26 18:55:59 dialing manager at 10.128.0.26:45029 2019/08/26 18:56:00 syscalls: 2487 2019/08/26 18:56:00 code coverage: enabled 2019/08/26 18:56:00 comparison tracing: enabled 2019/08/26 18:56:00 extra coverage: extra coverage is not supported by the kernel 2019/08/26 18:56:00 setuid sandbox: enabled 2019/08/26 18:56:00 namespace sandbox: enabled 2019/08/26 18:56:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/26 18:56:00 fault injection: enabled 2019/08/26 18:56:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/26 18:56:00 net packet injection: enabled 2019/08/26 18:56:00 net device setup: enabled 18:58:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10) 18:58:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xec, 0x0, &(0x7f0000000080)=0x4) syzkaller login: [ 222.312854][ T8968] IPVS: ftp: loaded support on port[0] = 21 [ 222.476683][ T8971] IPVS: ftp: loaded support on port[0] = 21 [ 222.489313][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 222.577513][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.586671][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.596499][ T8968] device bridge_slave_0 entered promiscuous mode [ 222.608523][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.617654][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state 18:58:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xed, 0x0, &(0x7f0000000080)=0x4) [ 222.626235][ T8968] device bridge_slave_1 entered promiscuous mode [ 222.713755][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.746392][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.777103][ T8971] chnl_net:caif_netlink_parms(): no params data found [ 222.834115][ T8968] team0: Port device team_slave_0 added [ 222.847882][ T8968] team0: Port device team_slave_1 added 18:58:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa0, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0xffff}}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") [ 222.943974][ T8968] device hsr_slave_0 entered promiscuous mode [ 222.981328][ T8968] device hsr_slave_1 entered promiscuous mode [ 223.036380][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.051081][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.059145][ T8971] device bridge_slave_0 entered promiscuous mode [ 223.067516][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.074681][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.083642][ T8971] device bridge_slave_1 entered promiscuous mode [ 223.108298][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.121917][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.140724][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.148013][ T8968] bridge0: port 2(bridge_slave_1) entered forwarding state 18:58:29 executing program 4: pipe(0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) prctl$PR_SVE_GET_VL(0x33, 0x1407e) [ 223.150482][ T8974] IPVS: ftp: loaded support on port[0] = 21 [ 223.156256][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.169212][ T8968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.214777][ T8976] IPVS: ftp: loaded support on port[0] = 21 [ 223.243111][ T8971] team0: Port device team_slave_0 added [ 223.275041][ T8971] team0: Port device team_slave_1 added [ 223.424720][ T8971] device hsr_slave_0 entered promiscuous mode 18:58:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() fcntl$getownex(r1, 0x10, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0x7, &(0x7f0000000080)='}wlan0\x00'}, 0x30) getpgid(0x0) r2 = gettid() syz_open_procfs(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setpgid(0x0, 0x0) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r3, 0x1) [ 223.503083][ T8971] device hsr_slave_1 entered promiscuous mode [ 223.543354][ T8971] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.556001][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.569458][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.589957][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.599108][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 223.650854][ T8974] chnl_net:caif_netlink_parms(): no params data found [ 223.688859][ T8978] IPVS: ftp: loaded support on port[0] = 21 [ 223.702553][ T8980] IPVS: ftp: loaded support on port[0] = 21 [ 223.751735][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.759127][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.767306][ T8974] device bridge_slave_0 entered promiscuous mode [ 223.777960][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.785286][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.793720][ T8974] device bridge_slave_1 entered promiscuous mode [ 223.803930][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.813525][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.826889][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.839432][ T8976] chnl_net:caif_netlink_parms(): no params data found [ 223.864655][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.878900][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.907439][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.917619][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.926571][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.934074][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.984255][ T8974] team0: Port device team_slave_0 added [ 223.999338][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.009693][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.019357][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.027375][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.036520][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.055916][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.063497][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.075047][ T8976] device bridge_slave_0 entered promiscuous mode [ 224.085929][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.093476][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.101579][ T8976] device bridge_slave_1 entered promiscuous mode [ 224.110308][ T8974] team0: Port device team_slave_1 added [ 224.174394][ T8974] device hsr_slave_0 entered promiscuous mode [ 224.221441][ T8974] device hsr_slave_1 entered promiscuous mode [ 224.291212][ T8974] debugfs: Directory 'hsr0' with parent '/' already present! [ 224.306476][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.316316][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.326099][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.335240][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.356727][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.389831][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.424560][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.434323][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.443142][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.451986][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.461042][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.470004][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.508627][ T8976] team0: Port device team_slave_0 added [ 224.516605][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.556734][ T8976] team0: Port device team_slave_1 added [ 224.635045][ T8976] device hsr_slave_0 entered promiscuous mode [ 224.701650][ T8976] device hsr_slave_1 entered promiscuous mode [ 224.751238][ T8976] debugfs: Directory 'hsr0' with parent '/' already present! [ 224.784189][ T8980] chnl_net:caif_netlink_parms(): no params data found [ 224.824345][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.835325][ T8978] chnl_net:caif_netlink_parms(): no params data found [ 224.886243][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.894762][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.902874][ T8980] device bridge_slave_0 entered promiscuous mode [ 224.911406][ T8980] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.918741][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.928621][ T8980] device bridge_slave_1 entered promiscuous mode [ 224.937279][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.945326][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.954602][ T8978] device bridge_slave_0 entered promiscuous mode [ 224.963431][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.970755][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.979190][ T8978] device bridge_slave_1 entered promiscuous mode [ 225.002157][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.032839][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.055338][ T8980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.069899][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.078084][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.090028][ T8971] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.099157][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.124110][ T8978] team0: Port device team_slave_0 added [ 225.133194][ T8980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.170545][ T8978] team0: Port device team_slave_1 added [ 225.186517][ T8980] team0: Port device team_slave_0 added [ 225.194957][ T8980] team0: Port device team_slave_1 added [ 225.238172][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.257028][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.287968][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.295812][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.304229][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.313582][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.322442][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.329862][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.337822][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.347380][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:58:31 executing program 0: [ 225.428924][ T8978] device hsr_slave_0 entered promiscuous mode 18:58:31 executing program 0: [ 225.473649][ T8978] device hsr_slave_1 entered promiscuous mode 18:58:31 executing program 0: [ 225.521282][ T8978] debugfs: Directory 'hsr0' with parent '/' already present! [ 225.529476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 18:58:31 executing program 0: [ 225.564128][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0 18:58:31 executing program 0: [ 225.624207][ T8980] device hsr_slave_0 entered promiscuous mode 18:58:31 executing program 0: 18:58:31 executing program 0: [ 225.671447][ T8980] device hsr_slave_1 entered promiscuous mode [ 225.722394][ T8980] debugfs: Directory 'hsr0' with parent '/' already present! [ 225.764342][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.785140][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.805083][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.813828][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.830439][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.847859][ T8971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.860292][ T8971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.874294][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.885291][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.894413][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.904365][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.913399][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.923071][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.938556][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.960383][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.969037][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.978449][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.987931][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.996258][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.006276][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.016168][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.024453][ T8981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.034293][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.045341][ T8976] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.067394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.077766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.087341][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.095514][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.104932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.121360][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.135781][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.146293][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.154176][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.162938][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.173412][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.183936][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.210697][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.221361][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.230413][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.240445][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.249892][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.259690][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.269050][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.276535][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.285270][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.299561][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.340467][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.349945][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.366130][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.376401][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.386685][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.395978][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.406572][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.416456][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.428380][ T8974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.441788][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.462301][ T8980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.476562][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.485751][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.496416][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.505893][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.515177][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.524064][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.532853][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.541657][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.565819][ T8980] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.585228][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.607003][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.626190][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.641379][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.650290][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.662064][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.669329][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.678564][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.689945][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.699059][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.706690][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.747111][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:58:32 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) r0 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x0, 0xc1f}, 0x0, 0x3, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r2) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) [ 226.758615][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.770227][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.779628][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.801566][ T8981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.818741][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.829893][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.857055][ C1] hrtimer: interrupt took 26004 ns [ 226.886254][ T8980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.904212][ T8980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.928701][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.945809][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.957458][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.973326][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.982807][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.994059][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.006076][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.013914][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.024004][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.032737][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.042853][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.053061][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.064413][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.072550][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.081172][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.090083][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.100006][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.109360][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.116495][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.166172][ T8980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.201724][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 18:58:33 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x400000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x10001, 0x0, 0x96b, 0x0, 0xdea}) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r1, 0x0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x80800) write$binfmt_misc(r2, &(0x7f0000000340)={'syz1', "51c2cdbb389a530ed3994216ca69710f33394436d9cd6621f43463e2e8f9008b124c8b1f1ca0797ccb1975e52a60066a778f80fbf964a63b8aa08ef752af997abb77c1fc5d07d7e2a4d242be401dcb58d75da0aa632d52124a17407ae9950faa86dc73eb78a16b6d5d4ea72c55143dc5111b2cc83a6f0a53"}, 0x7c) [ 227.217340][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.249592][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.260028][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.303622][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.313575][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.324422][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.337698][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.358083][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.374798][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.390570][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.401334][ T8978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.455890][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.604474][ T9041] IPVS: ftp: loaded support on port[0] = 21 [ 227.625225][ T9049] EXT4-fs (sda1): re-mounted. Opts: commit=0x000000000000ffff, [ 227.785295][ T9053] EXT4-fs (sda1): re-mounted. Opts: commit=0x000000000000ffff, 18:58:33 executing program 3: getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffff4) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "51c2cdbb389a530ed3994216ca69710f33394436d9cd6621f43463e2e8f9008b124c8b1f1ca0797ccb1975e52a60066a778f80fbf964a63b8aa08ef752af997abb77c1fc5d07d7e2a4d242be401dcb58"}, 0x54) 18:58:34 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r2 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000500)) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) fstat(r1, &(0x7f0000000880)) getpgid(r3) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0xe, 0x0, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8880, 0xc1f}, 0x0, 0x3, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x81, 0xffff, 'queue1\x00', 0x80000000}) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) membarrier(0x2, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r5) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 18:58:34 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) r0 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x0, 0xc1f}, 0x0, 0x3, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r2) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) 18:58:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000180)="ff", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) execve(0x0, 0x0, 0x0) r3 = dup2(r1, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) 18:58:34 executing program 5: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x801c581f, &(0x7f0000000080)) 18:58:34 executing program 1: mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x10000003fd, 0x0) write(r0, 0x0, 0x0) [ 228.312732][ T9073] IPVS: ftp: loaded support on port[0] = 21 18:58:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x20) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0'}, 0x4) 18:58:34 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "45d2ad", 0x8, 0x2c, 0x0, @rand_addr="26b15803ea0b04b886559d83b407163c", @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 18:58:34 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x40, 0xaad5) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280), 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000240)={0x0, 0x2, 0x2, 0x41b2bdc293375207, 0x7fff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) getpgid(0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7f, 0xfffe, 0x100000005}) [ 228.602889][ T9072] IPVS: ftp: loaded support on port[0] = 21 18:58:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x20) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0'}, 0x4) [ 229.076506][ T9085] IPVS: ftp: loaded support on port[0] = 21 18:58:37 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x400000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x10001, 0x0, 0x96b, 0x0, 0xdea}) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r1, 0x0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x80800) write$binfmt_misc(r2, &(0x7f0000000340)={'syz1', "51c2cdbb389a530ed3994216ca69710f33394436d9cd6621f43463e2e8f9008b124c8b1f1ca0797ccb1975e52a60066a778f80fbf964a63b8aa08ef752af997abb77c1fc5d07d7e2a4d242be401dcb58d75da0aa632d52124a17407ae9950faa86dc73eb78a16b6d5d4ea72c55143dc5111b2cc83a6f0a53"}, 0x7c) [ 232.036225][ T9126] IPVS: ftp: loaded support on port[0] = 21 18:58:38 executing program 3: getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffff4) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x0) write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "51c2cdbb389a530ed3994216ca69710f33394436d9cd6621f43463e2e8f9008b124c8b1f1ca0797ccb1975e52a60066a778f80fbf964a63b8aa08ef752af997abb77c1fc5d07d7e2a4d242be401dcb58"}, 0x54) 18:58:38 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, &(0x7f0000000000)=0x80000008, 0x4) ioctl$SG_EMULATED_HOST(r0, 0xc01c7c02, &(0x7f0000000000)) 18:58:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000400)="585ccbc4ed83b836c1a6474914dc5500b602c02bc7218a91690000000042e3d35228897507000000000000006ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfac1700b986f40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000240)="95c9e7ad96d33de061da4060272e0ef04897bfe0468c9ba8967126ebe592f5831b6183b209b59eba5dd5b3535e012c163b0d2b6aa61c63434f58cc85834428a4935f1d00feffeb743c28070f048e60d03d6dbc8419594b05959bd4a71260a764c45780f6983792", 0x67, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, 0x0, 0xb2fd28e000000000, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 18:58:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_thread_area(0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:58:38 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:38 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x33b, 0x0) 18:58:38 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:38 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:38 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:38 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 232.832595][ T9144] IPVS: ftp: loaded support on port[0] = 21 18:58:38 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hugetlbfs\x00', 0x0, 0x0) 18:58:38 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:39 executing program 3: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') timerfd_create(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:39 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:39 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:39 executing program 4: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:39 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:39 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:39 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:39 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:40 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:40 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:40 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:40 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 18:58:40 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:40 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:40 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d2a05a}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 18:58:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 3: 18:58:41 executing program 4: 18:58:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa1, 0x0, &(0x7f0000000080)=0x4) 18:58:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa4, 0x0, &(0x7f0000000080)=0x4) 18:58:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:41 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbb, 0x0, &(0x7f0000000080)=0x4) 18:58:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8e, 0x0, &(0x7f0000000080)=0x4) 18:58:41 executing program 4: syz_emit_ethernet(0x121, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0778fdb7fadb86dd6c8d91b900eb84063f02389d11792ca9f3da32e13f4d3b64fe80000000000000000000000000001032000478640000000031a65003680500fe8000000000000000000000000000bb9a97d3a1aaa33a116e34b56b8def2729fe8800000000000000000000000000014e204e23", @ANYRES32, @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)={0x0, 0xfffffffffffffffe, [0x0, 0xeee]}) 18:58:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty=[0x7, 0x80350000, 0xe80, 0x4000000, 0x7, 0x800000000000e012], [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300543, 0x2b, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 18:58:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa2, 0x0, &(0x7f0000000080)=0x4) 18:58:42 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa6, 0x0, &(0x7f0000000080)=0x4) 18:58:42 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 3: r0 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x9ab81) 18:58:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb2, 0x0, &(0x7f0000000080)=0x4) 18:58:42 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9d, 0x0, &(0x7f0000000080)=0x4) 18:58:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x97, 0x0, &(0x7f0000000080)=0x4) 18:58:43 executing program 5: userfaultfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa0, 0x0, &(0x7f0000000080)=0x4) 18:58:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000440)=[@acquire, @increfs={0x40046304, 0x3}], 0x0, 0x10000000, 0x0}) 18:58:43 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 5: userfaultfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000440)=[@acquire, @request_death, @clear_death={0x40046306, 0x0, 0x1200000000000000}], 0x0, 0x0, 0x0}) 18:58:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8f, 0x0, &(0x7f0000000080)=0x4) 18:58:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb9, 0x0, &(0x7f0000000080)=0x4) 18:58:43 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 237.861561][ T9378] binder: 9377:9378 unknown command 0 [ 237.867085][ T9378] binder: 9377:9378 ioctl c0306201 20000380 returned -22 18:58:43 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x93, 0x0, &(0x7f0000000080)=0x4) 18:58:43 executing program 5: userfaultfd(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 237.980398][ T9378] binder: BINDER_SET_CONTEXT_MGR already set 18:58:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9c, 0x0, &(0x7f0000000080)=0x4) [ 238.108582][ T9389] binder: 9377:9389 unknown command 0 18:58:44 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 238.159828][ T9389] binder: 9377:9389 ioctl c0306201 20000380 returned -22 18:58:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xaa, 0x0, &(0x7f0000000080)=0x4) [ 238.209601][ T9378] binder: 9377:9378 ioctl 40046207 0 returned -16 18:58:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9f, 0x0, &(0x7f0000000080)=0x4) 18:58:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xad, 0x0, &(0x7f0000000080)=0x4) 18:58:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000005c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'system'}, 0x2}]}) 18:58:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8a, 0x0, &(0x7f0000000080)=0x4) 18:58:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8c, 0x0, &(0x7f0000000080)=0x4) 18:58:44 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x98, 0x0, &(0x7f0000000080)=0x4) 18:58:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9b, 0x0, &(0x7f0000000080)=0x4) 18:58:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x90, 0x0, &(0x7f0000000080)=0x4) 18:58:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa3, 0x0, &(0x7f0000000080)=0x4) 18:58:45 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb5, 0x0, &(0x7f0000000080)=0x4) 18:58:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000440)=[@acquire, @request_death, @clear_death={0x40046306, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 18:58:45 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 3: syz_emit_ethernet(0x121, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0778fdb7fadb86dd6c8d91b900eb84063f02389d11792ca9f3da32e13f4d3b64fe80000000000000000000000000001032000478640000000031a65003680500fe8000000000000000000000000000bb9a97d3a1aaa33a116e34b56b8def2729fe8800000000000000000000000000014e204e23", @ANYRES32, @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)) 18:58:45 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000440)=[@acquire, @request_death, @clear_death={0x40046306, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 18:58:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xba, 0x0, &(0x7f0000000080)=0x4) 18:58:45 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:58:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x95, 0x0, &(0x7f0000000080)=0x4) 18:58:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000440)=[@acquire, @request_death, @clear_death={0x40046306, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 18:58:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa8, 0x0, &(0x7f0000000080)=0x4) 18:58:46 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000440)=[@acquire, @request_death, @clear_death={0x40046306, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 18:58:46 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbd, 0x0, &(0x7f0000000080)=0x4) 18:58:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbc, 0x0, &(0x7f0000000080)=0x4) 18:58:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb8, 0x0, &(0x7f0000000080)=0x4) 18:58:46 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9a, 0x0, &(0x7f0000000080)=0x4) 18:58:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000440)=[@acquire, @increfs={0x40406300, 0x3}], 0x0, 0x0, 0x0}) 18:58:47 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @random="0778fdb7fadb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x811, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb}}}}}, 0x0) 18:58:47 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x40) ioctl$FS_IOC_GETFLAGS(r0, 0x801c581f, &(0x7f0000000080)) 18:58:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x28, 0x0, &(0x7f0000000440)=[@acquire, @request_death, @clear_death={0x400c630f, 0x0, 0xfffffdfd}], 0x0, 0x0, 0x0}) 18:58:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x82, 0x0, &(0x7f0000000080)=0x4) 18:58:47 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeac, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x92, 0x93, 0xfffffffffffffffc, 0x8, 0x9}) 18:58:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) memfd_create(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 18:58:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8925, &(0x7f0000000180)) 18:58:47 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 241.769095][ T9651] netlink: 'syz-executor.0': attribute type 17 has an invalid length. 18:58:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:47 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 241.835361][ T9651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:58:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) memfd_create(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 18:58:48 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:48 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:48 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20321798c481a14337b6d46eb9892153dc9449901bfe9b0700000000000000943fcb2b00559ba8acf6290000020000994e3690c53ebf10e961"], 0x1}}, 0x0) clone(0x1000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 242.373004][ T9649] mkiss: ax0: crc mode is auto. [ 242.378555][ T9653] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 242.505459][ T9653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 18:58:48 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'y\x00'}]}, 0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) close(r1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 18:58:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:48 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 242.686828][ T9649] mkiss: ax0: crc mode is auto. 18:58:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000021000b03000023960900000000000080", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}}, 0x0) 18:58:48 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:48 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x0) 18:58:48 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r5 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000080)='nodevGPL#\x00', &(0x7f00000000c0)='./file0\x00', r4) dup3(r0, r4, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:58:48 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007911300000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:58:49 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:49 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x0) 18:58:49 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:49 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'y\x00'}]}, 0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) close(r1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 18:58:49 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, 0x0, 0x0, 0x0) 18:58:49 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="736d61636b6673726f6f741d"]) 18:58:49 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x0, 0x1, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 18:58:49 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'y\x00'}]}, 0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) close(r1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 18:58:49 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x400000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x10001, 0x0, 0x96b, 0x0, 0xdea}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:58:50 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 18:58:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x3, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 18:58:50 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:50 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x3, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 18:58:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f0000000440)=[@clear_death={0x40106308, 0xa000000}], 0x0, 0x0, 0x0}) [ 244.664672][ T9768] IPVS: ftp: loaded support on port[0] = 21 18:58:50 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x87, 0x0, &(0x7f0000000080)=0x4) 18:58:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0xf, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000080), 0x0, [{}]}, 0x88) 18:58:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3a) [ 244.995922][ T9770] IPVS: ftp: loaded support on port[0] = 21 18:58:53 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x400000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x10001, 0x0, 0x96b, 0x0, 0xdea}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:58:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0xf, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000080), 0x0, [{}]}, 0x88) 18:58:53 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:53 executing program 0: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2000000, 0x0, 0x1d}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) ptrace$cont(0x9, r1, 0x0, 0x0) 18:58:53 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3a) 18:58:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3a) 18:58:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_opts(r1, 0x11b, 0x0, 0x0, &(0x7f0000000040)) 18:58:53 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:53 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) [ 247.574384][ T9838] IPVS: ftp: loaded support on port[0] = 21 18:58:53 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:54 executing program 2: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x801c581f, &(0x7f0000000080)) 18:58:54 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:54 executing program 0: syz_emit_ethernet(0x2a4, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 18:58:54 executing program 4: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x400000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:58:54 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3a) 18:58:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 18:58:54 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:54 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="6102000020000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:58:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000440)=[@acquire={0x40086303}], 0x0, 0x0, 0x0}) 18:58:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140)=0x8, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) [ 248.548453][ T9869] IPVS: ftp: loaded support on port[0] = 21 18:58:54 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:54 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe, 0x0, &(0x7f0000000080)=0x4) [ 248.732396][ T9897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 248.997340][ T9876] IPVS: ftp: loaded support on port[0] = 21 18:58:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b5a400000000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001900000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001010000000000000000000000100000fa000000000000000000000000a85f00cc99b4d1000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) 18:58:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={[{@noquota='noquota'}]}) 18:58:57 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:57 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="6302000020000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:58:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0x30}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000004c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x2000000006) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f00000000c0)={0x10300, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfefc) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000680)=""/212, 0xd4}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f0000000580)=""/170, 0xaa}], 0x6}}], 0x1, 0x0, 0x0) 18:58:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000100)=[{r1}, {r0}], 0x2, 0x81) 18:58:57 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000440)=[@acquire, @clear_death={0x40046306, 0x0, 0x40046304}], 0x0, 0x0, 0x0}) 18:58:57 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, &(0x7f0000000040)) 18:58:57 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:58:57 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_opts(r0, 0x11b, 0x0, 0x0, &(0x7f0000000040)) 18:58:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x83, 0x0, &(0x7f0000000080)=0x4) 18:58:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 18:58:58 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:58 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) io_setup(0xc, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:58:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 18:58:58 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 18:58:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x85, 0x0, &(0x7f0000000080)=0x4) 18:58:58 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 18:58:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 18:58:58 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) write$cgroup_int(r2, 0x0, 0x0) 18:58:58 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x30000000) 18:58:58 executing program 0: syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:58:58 executing program 5: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) 18:58:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x6) 18:58:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)) fstat(r0, 0x0) lstat(0x0, 0x0) getgid() lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235000100000f3048b8568b929eb42e3b020f23c00f21f835010003000f23f8440f01ca66b858008ec00f20d835200000000f22d866bad004ec650f01cf66baf80cb8bb6e038fef66bafc0cec363e450f3066b85e008ed8"}], 0x8b, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000004, 0x0, 0x0, 0x0, 0x4cc]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:58:58 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:58:58 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='security.evm\x00', &(0x7f00000005c0)=@ng, 0x2, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x1}, 0x50) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 18:58:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) [ 252.864863][T10027] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:58:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x88, 0x0, &(0x7f0000000080)=0x4) [ 253.037188][T10043] fuse: Bad value for 'subtype' 18:58:59 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) [ 253.094191][T10049] fuse: Bad value for 'subtype' 18:58:59 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) 18:58:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000bc0)="390000001300090468fe0700001a00000700ff3f03000000450001070000001419001a0004001210070000f48aa159ab090000", 0x33}], 0x1) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:58:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x86, 0x0, &(0x7f0000000080)=0x4) 18:58:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xb58, 0x0) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:58:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000180)=0x54) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 253.380845][T10066] QAT: Invalid ioctl 18:58:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000bc0)="390000001300090468fe0700001a00000700ff3f03000000450001070000001419001a0004001210070000f48aa159ab090000", 0x33}], 0x1) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 253.446059][T10071] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 18:58:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x5423, &(0x7f0000000180)) 18:58:59 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) [ 253.528381][T10069] ISOFS: Unable to identify CD-ROM format. [ 253.674270][T10070] QAT: Invalid ioctl [ 253.707574][T10076] mkiss: ax0: crc mode is auto. 18:58:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001500)={{0x81, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x4, 0x1}) 18:58:59 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) [ 253.780212][T10083] ISOFS: Unable to identify CD-ROM format. 18:58:59 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:58:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000bc0)="390000001300090468fe0700001a00000700ff3f03000000450001070000001419001a0004001210070000f48aa159ab090000", 0x33}], 0x1) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 253.891263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 253.897625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 253.919030][T10076] mkiss: ax0: crc mode is auto. 18:58:59 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) [ 254.051059][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 254.057422][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 254.063703][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 254.069821][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:00 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) 18:59:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) 18:59:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x5423, &(0x7f0000000180)) [ 254.249371][T10123] QAT: Invalid ioctl [ 254.353643][T10117] ISOFS: Unable to identify CD-ROM format. 18:59:00 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) 18:59:00 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) [ 254.438931][T10135] mkiss: ax0: crc mode is auto. [ 254.484551][T10134] QAT: Invalid ioctl 18:59:00 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r1, 0x0) sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffe54, 0x0, 0x0, 0x9a) splice(r1, 0x0, r0, 0x0, 0x11001, 0x0) 18:59:00 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 254.531073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 254.536893][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 254.634665][T10147] QAT: Invalid ioctl 18:59:00 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) [ 254.807392][T10149] QAT: Invalid ioctl 18:59:00 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) [ 254.851048][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 254.857078][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:00 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x80000) 18:59:01 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xb6c}}], 0x34, 0xac0, 0x0) 18:59:01 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 255.044551][T10172] QAT: Invalid ioctl 18:59:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000340), 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001e000000000000facde7ee4ac5f3a9cb00000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000000000}, 0x17}, 0x48) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x589982, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000880), &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0x7}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0x9c}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001a40)={0x0, 0x9}, &(0x7f0000001a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001b40)=0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={0x0, 0x4, 0x7, 0x7, 0xfffffffffffffffe, 0x5, 0x6244, 0x4, {0x0, @in={{0x2, 0x4e22, @local}}, 0x3722, 0x6, 0x0, 0x9, 0xffffffffffff6542}}, &(0x7f0000001c40)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000f00)={r5, 0x6}, &(0x7f0000000ec0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002380)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000002f3089fa6f5e10be469d825ea847acc0dd12253a4a15212ffc0fe5f55c61333e02000000632396395c7a26ceea3a9f6edb601027"], &(0x7f00000023c0)=0x3c) 18:59:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) close(r1) 18:59:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:01 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 255.547731][T10192] QAT: Invalid ioctl 18:59:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 18:59:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/213, 0xd5) getdents64(r1, &(0x7f0000000df0)=""/528, 0x6cc) 18:59:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) 18:59:01 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) memfd_create(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:59:02 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 18:59:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:02 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:59:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:02 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x79c4}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000008483000000000000725f85f6370337b065ed287d1a547571e7e6f9ff28b76087a2b31dfee8608d48ce1ebe78835f4c117a79d14911a70ac2d08dbc462caf9120ed20c7e601ddc0ef9a8be1cb93a864a61fc7a24688bf13c2c1e2ac61f8221681618c9eabb71fbe28ff006e11d4bf9640065f0b7c89fbc070e9040799157061cf92635052cf694a7bd871183c015a5061f1a012ca522f5b4b1c5938229d581966df8178a872942b26fab80fd2818a3569a6c191e8c97350ca2b9466209364c63b30bcef8dbd1bb4ee6ca397a283493a4b"], 0xc) 18:59:02 executing program 0: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:59:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") getsockopt$inet_int(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 18:59:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x3) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) [ 257.159690][T10252] IPVS: ftp: loaded support on port[0] = 21 [ 257.524168][T10275] IPVS: ftp: loaded support on port[0] = 21 18:59:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x3) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 18:59:03 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0) 18:59:03 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:59:03 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:59:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 257.913682][T10289] mkiss: ax0: crc mode is auto. [ 258.066662][T10289] mkiss: ax0: crc mode is auto. [ 259.021057][ C0] net_ratelimit: 22 callbacks suppressed [ 259.021066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 259.033503][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 259.571217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 259.577130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 260.131064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 260.137410][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 260.291092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 260.297181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 260.304131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 260.310364][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 18:59:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x84, 0x0, &(0x7f0000000080)=0x4) 18:59:06 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:59:06 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x25, 0x0) 18:59:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 260.712284][T10326] mkiss: ax0: crc mode is auto. 18:59:06 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @random="0778fdb7fadb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x811, 0x0, @dev, @remote}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x2}}}}}, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, [0x0, 0xeee]}) 18:59:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x7fff, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x700000000000000, 0x8, 0x0, r1, 0x0}]) 18:59:06 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x5, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 18:59:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000004c0)=' '}) 18:59:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:07 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 261.215636][T10372] mkiss: ax0: crc mode is auto. 18:59:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 18:59:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040), 0x1c) 18:59:07 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='nodevGPL#\x00', &(0x7f00000000c0)='./file0\x00', r3) dup3(r0, r3, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:59:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:07 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:07 executing program 1: [ 261.822442][T10411] mkiss: ax0: crc mode is auto. 18:59:07 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:07 executing program 2: 18:59:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:08 executing program 1: 18:59:08 executing program 0: 18:59:08 executing program 2: 18:59:08 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x3ff}}]}) 18:59:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:08 executing program 2: 18:59:08 executing program 0: 18:59:08 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:08 executing program 2: 18:59:08 executing program 0: 18:59:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:09 executing program 2: 18:59:09 executing program 1: 18:59:09 executing program 0: 18:59:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:09 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)) 18:59:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:09 executing program 2: 18:59:09 executing program 1: 18:59:09 executing program 0: 18:59:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:09 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)) 18:59:09 executing program 2: 18:59:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:09 executing program 1: 18:59:10 executing program 0: 18:59:10 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)) 18:59:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:10 executing program 2: 18:59:10 executing program 1: [ 264.291038][ C1] net_ratelimit: 18 callbacks suppressed [ 264.291045][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 264.302912][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:10 executing program 0: 18:59:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) [ 264.451049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 264.457171][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 264.463272][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 264.469490][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:10 executing program 2: 18:59:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:10 executing program 1: 18:59:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:10 executing program 0: 18:59:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc1616187"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:10 executing program 2: 18:59:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 264.931099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 264.937263][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:10 executing program 1: 18:59:11 executing program 0: 18:59:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc1616187"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 2: 18:59:11 executing program 1: 18:59:11 executing program 0: [ 265.251074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 265.259252][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc1616187"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 2: 18:59:11 executing program 1: 18:59:11 executing program 0: 18:59:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 2: 18:59:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 1: 18:59:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 2: 18:59:11 executing program 0: 18:59:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:59:11 executing program 1: 18:59:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:11 executing program 2: 18:59:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:59:12 executing program 0: 18:59:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f11123"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:12 executing program 1: 18:59:12 executing program 2: 18:59:12 executing program 0: 18:59:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18:59:12 executing program 1: 18:59:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f11123"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:12 executing program 0: 18:59:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:12 executing program 2: 18:59:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:12 executing program 1: 18:59:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f11123"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:12 executing program 0: 18:59:12 executing program 1: 18:59:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:12 executing program 2: 18:59:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:12 executing program 0: 18:59:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 2: 18:59:13 executing program 1: 18:59:13 executing program 0: 18:59:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:13 executing program 2: 18:59:13 executing program 0: 18:59:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:13 executing program 1: 18:59:13 executing program 0: 18:59:13 executing program 2: 18:59:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)) 18:59:13 executing program 1: 18:59:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 0: 18:59:13 executing program 2: 18:59:13 executing program 1: 18:59:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)) 18:59:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:13 executing program 2: 18:59:13 executing program 0: 18:59:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:14 executing program 1: [ 268.059307][T10749] mkiss: ax0: crc mode is auto. 18:59:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:14 executing program 0: 18:59:14 executing program 2: 18:59:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a76795"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:14 executing program 1: 18:59:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)) 18:59:14 executing program 0: 18:59:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a76795"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:14 executing program 2: 18:59:14 executing program 1: [ 268.662126][T10787] mkiss: ax0: crc mode is auto. 18:59:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)) 18:59:14 executing program 0: 18:59:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a76795"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:14 executing program 2: 18:59:14 executing program 1: [ 269.052488][T10819] mkiss: ax0: crc mode is auto. 18:59:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:15 executing program 2: 18:59:15 executing program 0: 18:59:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:15 executing program 1: 18:59:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, 0x0) 18:59:15 executing program 2: [ 269.411072][ C0] net_ratelimit: 22 callbacks suppressed [ 269.411080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 269.423065][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:15 executing program 0: [ 269.515539][T10845] mkiss: ax0: crc mode is auto. 18:59:15 executing program 1: 18:59:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:15 executing program 2: 18:59:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, 0x0) 18:59:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 269.981048][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 269.986882][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 270.531046][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 270.536976][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:16 executing program 0: 18:59:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8926, 0x0) 18:59:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb1, 0x0, &(0x7f0000000080)=0x4) 18:59:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc1616187"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb6, 0x0, &(0x7f0000000080)=0x4) [ 270.691074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 270.697004][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 270.703092][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 270.709057][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @empty=[0x7, 0x80350000, 0xe80, 0x4000000, 0x7, 0x800000000000e012], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2b, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 270.870830][T10897] mkiss: ax0: crc mode is auto. 18:59:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x94, 0x0, &(0x7f0000000080)=0x4) 18:59:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) 18:59:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc1616187"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:17 executing program 4: 18:59:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa5, 0x0, &(0x7f0000000080)=0x4) 18:59:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x02\x00\x00\x00\x00\x00\x00\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, &(0x7f0000000080)=0x54) 18:59:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbf, 0x0, &(0x7f0000000080)=0x4) 18:59:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc1616187"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xaf, 0x0, &(0x7f0000000080)=0x4) 18:59:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xae, 0x0, &(0x7f0000000080)=0x4) 18:59:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb4, 0x0, &(0x7f0000000080)=0x4) 18:59:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x91, 0x0, &(0x7f0000000080)=0x4) 18:59:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa7, 0x0, &(0x7f0000000080)=0x4) 18:59:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8b, 0x0, &(0x7f0000000080)=0x4) 18:59:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa9, 0x0, &(0x7f0000000080)=0x4) 18:59:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xbe, 0x0, &(0x7f0000000080)=0x4) 18:59:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb3, 0x0, &(0x7f0000000080)=0x4) 18:59:18 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 18:59:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:18 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 18:59:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:18 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x40000000, &(0x7f0000000300)) 18:59:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x3ff}}]}) 18:59:18 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) sendfile(r0, r0, 0x0, 0x7fffffff) sendfile(r0, r1, 0x0, 0x40002) 18:59:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f11123"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 273.135989][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 273.136002][ T26] audit: type=1800 audit(1566845959.089:31): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16844 res=0 18:59:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 273.304458][ T26] audit: type=1804 audit(1566845959.179:32): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir512555455/syzkaller.c1MDBr/89/file0" dev="sda1" ino=16844 res=1 18:59:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x96, 0x0, &(0x7f0000000080)=0x4) 18:59:19 executing program 1: 18:59:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f11123"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:19 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000b00)={0x0, 0x0, 0xf3f5, 0x2000010001}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 273.455461][ T26] audit: type=1800 audit(1566845959.409:33): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16844 res=0 18:59:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:19 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'y\x00'}]}, 0xe) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) close(r1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 18:59:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 18:59:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f11123"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:19 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl(r0, 0x0, 0x0) [ 273.650488][ T26] audit: type=1804 audit(1566845959.459:34): pid=11024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir512555455/syzkaller.c1MDBr/89/file0" dev="sda1" ino=16844 res=1 18:59:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:19 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 18:59:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 2: 18:59:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 2: 18:59:20 executing program 4: 18:59:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 18:59:20 executing program 1: 18:59:20 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x4000802, 0x0) r1 = socket(0x10, 0x0, 0x773f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) prctl$PR_GET_TIMERSLACK(0x1e) getresuid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f00000002c0)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0) getpeername$netrom(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@bcast, @bcast, @null, @default, @netrom, @netrom, @null, @default]}, &(0x7f0000000040)=0x48) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 18:59:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 18:59:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 4: [ 274.691050][ C1] net_ratelimit: 18 callbacks suppressed [ 274.691059][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 274.703309][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:20 executing program 1: 18:59:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:20 executing program 0: 18:59:20 executing program 4: [ 274.851074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 274.857007][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 274.863060][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 274.863111][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:20 executing program 0: 18:59:20 executing program 0: 18:59:21 executing program 4: 18:59:21 executing program 0: 18:59:21 executing program 1: 18:59:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:21 executing program 5: 18:59:21 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x4000802, 0x0) r1 = socket(0x10, 0x0, 0x773f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) prctl$PR_GET_TIMERSLACK(0x1e) getresuid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f00000002c0)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0) getpeername$netrom(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@bcast, @bcast, @null, @default, @netrom, @netrom, @null, @default]}, &(0x7f0000000040)=0x48) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) [ 275.341064][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 275.347035][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:21 executing program 5: 18:59:21 executing program 0: 18:59:21 executing program 4: 18:59:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a76795"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:21 executing program 1: 18:59:21 executing program 0: 18:59:21 executing program 4: 18:59:21 executing program 5: [ 275.651033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 275.656956][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a76795"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:21 executing program 1: 18:59:21 executing program 4: 18:59:21 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x4000802, 0x0) r1 = socket(0x10, 0x0, 0x773f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x20600) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) prctl$PR_GET_TIMERSLACK(0x1e) getresuid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f00000002c0)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x3f, 0x0) getpeername$netrom(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@bcast, @bcast, @null, @default, @netrom, @netrom, @null, @default]}, &(0x7f0000000040)=0x48) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 18:59:21 executing program 5: 18:59:21 executing program 0: 18:59:21 executing program 4: 18:59:21 executing program 1: 18:59:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a76795"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:22 executing program 4: 18:59:22 executing program 0: 18:59:22 executing program 1: 18:59:22 executing program 5: 18:59:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:22 executing program 4: 18:59:22 executing program 2: 18:59:22 executing program 1: 18:59:22 executing program 0: 18:59:22 executing program 5: 18:59:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:22 executing program 4: 18:59:22 executing program 0: 18:59:22 executing program 5: 18:59:22 executing program 4: 18:59:22 executing program 1: 18:59:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:22 executing program 2: 18:59:22 executing program 4: 18:59:22 executing program 1: 18:59:22 executing program 5: 18:59:22 executing program 0: 18:59:22 executing program 4: 18:59:22 executing program 2: 18:59:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:23 executing program 1: 18:59:23 executing program 0: 18:59:23 executing program 5: 18:59:23 executing program 2: 18:59:23 executing program 4: 18:59:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:23 executing program 1: 18:59:23 executing program 0: 18:59:23 executing program 2: 18:59:23 executing program 5: 18:59:23 executing program 4: 18:59:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:23 executing program 5: 18:59:23 executing program 0: 18:59:23 executing program 1: 18:59:23 executing program 2: 18:59:23 executing program 4: 18:59:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:23 executing program 5: 18:59:23 executing program 0: 18:59:23 executing program 2: 18:59:23 executing program 1: 18:59:23 executing program 5: 18:59:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:23 executing program 4: 18:59:23 executing program 5: 18:59:24 executing program 1: 18:59:24 executing program 0: 18:59:24 executing program 2: 18:59:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:24 executing program 4: 18:59:24 executing program 2: 18:59:24 executing program 0: 18:59:24 executing program 5: 18:59:24 executing program 1: 18:59:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:24 executing program 2: 18:59:24 executing program 4: 18:59:24 executing program 0: 18:59:24 executing program 1: 18:59:24 executing program 5: 18:59:24 executing program 2: 18:59:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:24 executing program 4: 18:59:24 executing program 0: 18:59:24 executing program 1: 18:59:24 executing program 2: 18:59:24 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 18:59:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x15, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:24 executing program 1: 18:59:24 executing program 4: 18:59:24 executing program 0: 18:59:25 executing program 2: 18:59:25 executing program 0: 18:59:25 executing program 5: 18:59:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:25 executing program 1: 18:59:25 executing program 4: 18:59:25 executing program 2: 18:59:25 executing program 0: 18:59:25 executing program 5: 18:59:25 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x10001, 0x0, 0x96b, 0x0, 0xdea}) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffff4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x80800) write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "51c2cdbb389a530ed3994216ca69710f33394436d9cd6621f43463e2e8f9008b124c8b1f1ca0797ccb1975e52a60066a778f80fbf964a63b8aa08ef752af997abb77c1fc5d07d7e2a4d242be401dcb58"}, 0x54) 18:59:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xde, 0x0, &(0x7f0000000080)=0x4) 18:59:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd7, 0x0, &(0x7f0000000080)=0x4) 18:59:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd3, 0x0, &(0x7f0000000080)=0x4) 18:59:25 executing program 5: 18:59:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b11080000000000950000000000000021196e6f8099479ed38b4e8dce5319aea05fb68fa9f5a38f980859fe23a841cb46fb424f06698fdd6e289027f804512fc161618742ef3a5c64e7ca41c7cdb80c827070bd0aa6d5217f3c1a10c9fadf175324854eb1457b3696c5ccf234f1738a58042d310c09091221fa3e9d48cba240f1112367357d87e979c6beeffac1d14c3941e3a7679576d4"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 18:59:25 executing program 4: 18:59:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x3, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:59:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd8, 0x0, &(0x7f0000000080)=0x4) 18:59:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcd, 0x0, &(0x7f0000000080)=0x4) [ 279.811077][ C0] net_ratelimit: 22 callbacks suppressed [ 279.811084][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 279.823129][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:25 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) [ 279.902418][T11362] IPVS: ftp: loaded support on port[0] = 21 [ 280.338918][T11373] IPVS: ftp: loaded support on port[0] = 21 [ 280.381117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 280.387307][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 280.931056][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 280.937199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 281.091074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 281.096969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 281.104671][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 281.110619][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:27 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x5, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x29, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 18:59:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xca, 0x0, &(0x7f0000000080)=0x4) 18:59:27 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000140)='F', 0x1, 0xfffffffffffffffe) 18:59:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x3, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:59:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x58502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) 18:59:27 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) 18:59:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xdd, 0x0, &(0x7f0000000080)=0x4) 18:59:27 executing program 5: ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffeaa}) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, &(0x7f0000000000)=0x80000008, 0x4) ioctl$SG_EMULATED_HOST(r0, 0xc01c7c02, &(0x7f0000000000)) 18:59:27 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) getdents64(r0, &(0x7f0000000300)=""/4096, 0x1280) 18:59:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe0, 0x0, &(0x7f0000000080)=0x4) 18:59:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f0000000440)=[@clear_death={0x40106308}], 0x0, 0x0, 0x0}) 18:59:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x58502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) 18:59:28 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, &(0x7f0000000080)=0x54) 18:59:28 executing program 5: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab04) 18:59:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, 0x0, &(0x7f0000000080)=0x4) 18:59:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe6, 0x0, &(0x7f0000000080)=0x4) 18:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004b80)={0x14, 0x40000000000013, 0xffffffffffffffbd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 18:59:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffffffff, 0x58502) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xa80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) [ 282.321180][T11454] block nbd5: shutting down sockets [ 282.322352][T11451] IPVS: ftp: loaded support on port[0] = 21 18:59:28 executing program 5: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r0) setresuid(0x0, 0xfffe, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x100000001) 18:59:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="4c0000001200ff095ffefd956fa283b724a6006b00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0xffd2}], 0x1}, 0x0) 18:59:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCSETS2(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 18:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004b80)={0x14, 0x40000000000013, 0xffffffffffffffbd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) 18:59:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 282.680539][T11451] IPVS: ftp: loaded support on port[0] = 21 [ 282.749796][T11485] sp0: Synchronizing with TNC 18:59:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="4c0000001200ff095ffefd956fa283b724a6006b00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0xffd2}], 0x1}, 0x0) 18:59:30 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, &(0x7f0000000080)=0x54) 18:59:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe5, 0x0, &(0x7f0000000080)=0x4) 18:59:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd2, 0x0, &(0x7f0000000080)=0x4) 18:59:30 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 18:59:30 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="4c0000001200ff095ffefd956fa283b724a6006b00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0xffd2}], 0x1}, 0x0) 18:59:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd5, 0x0, &(0x7f0000000080)=0x4) 18:59:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd9, 0x0, &(0x7f0000000080)=0x4) 18:59:30 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 18:59:30 executing program 4: write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x21, 0x1}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r3 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000840)=0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000740)={{0xfffffffffffffb85, 0x7}, 'port1\x00', 0x4, 0x100000, 0x80000001, 0x80000000, 0x3f, 0x4, 0x2, 0x0, 0x3}) fstat(r1, &(0x7f0000000880)) getpgid(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x3, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x81, 0xffff, 'queue1\x00', 0x80000000}) request_key(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) membarrier(0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r7) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x4e20, @broadcast}}) [ 284.720750][T11530] IPVS: ftp: loaded support on port[0] = 21 18:59:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xda, 0x0, &(0x7f0000000080)=0x4) 18:59:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe2, 0x0, &(0x7f0000000080)=0x4) 18:59:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd4, 0x0, &(0x7f0000000080)=0x4) [ 285.091042][ C1] net_ratelimit: 18 callbacks suppressed [ 285.091050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 285.102723][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:31 executing program 3: write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x21, 0x1}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r3 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000840)=0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000740)={{0xfffffffffffffb85, 0x7}, 'port1\x00', 0x4, 0x100000, 0x80000001, 0x80000000, 0x3f, 0x4, 0x2, 0x0, 0x3}) fstat(r1, &(0x7f0000000880)) getpgid(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x3, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x81, 0xffff, 'queue1\x00', 0x80000000}) request_key(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) membarrier(0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r7) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x4e20, @broadcast}}) 18:59:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002100)}], 0x1}}], 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)={0x54, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@generic="10cc59530d978c3f914e7932d3759b5c40e5c278bb922bb33b09f0decb25bcc72aedf4cd1d258959ae7be0e7c2aa6272e1b94b240f83e69a2483b3b333"]}, 0x54}}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a4d0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 18:59:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xdb, 0x0, &(0x7f0000000080)=0x4) 18:59:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:31 executing program 4: write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x21, 0x1}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r3 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000840)=0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000740)={{0xfffffffffffffb85, 0x7}, 'port1\x00', 0x4, 0x100000, 0x80000001, 0x80000000, 0x3f, 0x4, 0x2, 0x0, 0x3}) fstat(r1, &(0x7f0000000880)) getpgid(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x3, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x81, 0xffff, 'queue1\x00', 0x80000000}) request_key(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) membarrier(0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r7) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x4e20, @broadcast}}) 18:59:31 executing program 0: write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x21, 0x1}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r3 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0), 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000840)=0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000740)={{0xfffffffffffffb85, 0x7}, 'port1\x00', 0x4, 0x100000, 0x80000001, 0x80000000, 0x3f, 0x4, 0x2, 0x0, 0x3}) fstat(r1, &(0x7f0000000880)) getpgid(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x3, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x81, 0xffff, 'queue1\x00', 0x80000000}) request_key(0x0, &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) membarrier(0x2, 0x0) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r7) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x4e20, @broadcast}}) [ 285.251050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 285.256899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 285.263531][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 285.269409][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x80) ioctl$TCSBRKP(r0, 0x5425, 0xa) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x2000000000002) 18:59:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:31 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffb4, &(0x7f0000000180), 0x361}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)='ip6tnl0\x00') [ 285.586375][T11581] mmap: syz-executor.2 (11581) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 18:59:31 executing program 4: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@dmask={'dmask'}}, {@case_sensitive_no='case_sensitive=no'}, {@uid={'uid'}}, {@umask={'umask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}]}) [ 285.731612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 285.737697][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00\x00\x00\x00\x00\x00\x9496\x9c\xd7\xa6N\xeay\xad\xd2\xb0\"V\x04.0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x44, r3}) dup3(r1, r2, 0x0) [ 285.847634][T11593] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 285.942460][T11593] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. [ 286.051114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 286.057339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 286.076462][T11593] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 286.180073][T11593] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size. 18:59:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe3, 0x0, &(0x7f0000000080)=0x4) 18:59:32 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:59:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1) 18:59:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc1, 0x0, &(0x7f0000000080)=0x4) 18:59:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc5, 0x0, &(0x7f0000000080)=0x4) 18:59:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe3, 0x0, &(0x7f0000000080)=0x4) 18:59:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:32 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1) 18:59:32 executing program 4: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:59:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc6, 0x0, &(0x7f0000000080)=0x4) 18:59:33 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 18:59:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:33 executing program 0: socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0xffffffff00000000, 0x0, &(0x7f0000000000)=0x80000008, 0x4) ioctl$SG_EMULATED_HOST(r0, 0xc01c7c02, &(0x7f0000000000)) 18:59:33 executing program 2: r0 = socket(0x100000000000011, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, 0x44}) 18:59:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) close(r1) 18:59:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc4, 0x0, &(0x7f0000000080)=0x4) 18:59:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcf, 0x0, &(0x7f0000000080)=0x4) 18:59:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x0, @local}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e20, @dev}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x0, 0x0, @remote}], 0x5c) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:59:33 executing program 0: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x26) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 287.728775][T11694] block nbd0: Receive control failed (result -22) [ 287.744713][T11681] block nbd0: shutting down sockets [ 287.827908][T11687] block nbd0: Could not allocate knbd recv work queue. [ 287.871682][T11687] block nbd0: shutting down sockets [ 287.983446][T11663] debugfs: File '11644' in directory 'proc' already present! 18:59:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc8, 0x0, &(0x7f0000000080)=0x4) 18:59:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe9, 0x0, &(0x7f0000000080)=0x4) 18:59:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x0, @local}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e20, @dev}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x0, 0x0, @remote}], 0x5c) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:59:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xdc, 0x0, &(0x7f0000000080)=0x4) 18:59:34 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:59:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:34 executing program 2: 18:59:34 executing program 0: 18:59:34 executing program 1: 18:59:34 executing program 4: 18:59:34 executing program 4: 18:59:34 executing program 0: 18:59:34 executing program 2: 18:59:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:34 executing program 1: 18:59:34 executing program 2: 18:59:34 executing program 3: 18:59:34 executing program 1: 18:59:34 executing program 0: 18:59:34 executing program 4: 18:59:34 executing program 2: 18:59:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:35 executing program 4: 18:59:35 executing program 2: 18:59:35 executing program 1: 18:59:35 executing program 0: 18:59:35 executing program 3: 18:59:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:35 executing program 2: 18:59:35 executing program 1: 18:59:35 executing program 3: 18:59:35 executing program 4: 18:59:35 executing program 0: 18:59:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:35 executing program 2: 18:59:35 executing program 4: 18:59:35 executing program 1: 18:59:35 executing program 3: 18:59:35 executing program 0: 18:59:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:35 executing program 1: 18:59:35 executing program 3: 18:59:35 executing program 4: 18:59:35 executing program 2: 18:59:35 executing program 0: 18:59:35 executing program 1: 18:59:35 executing program 4: 18:59:35 executing program 3: 18:59:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:35 executing program 2: 18:59:36 executing program 0: 18:59:36 executing program 4: 18:59:36 executing program 1: 18:59:36 executing program 3: 18:59:36 executing program 0: 18:59:36 executing program 2: [ 290.211062][ C0] net_ratelimit: 22 callbacks suppressed [ 290.211069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 290.231569][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:36 executing program 4: 18:59:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:36 executing program 1: 18:59:36 executing program 3: 18:59:36 executing program 2: 18:59:36 executing program 0: 18:59:36 executing program 1: 18:59:36 executing program 4: 18:59:36 executing program 3: 18:59:36 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:36 executing program 0: 18:59:36 executing program 2: 18:59:36 executing program 4: 18:59:36 executing program 1: [ 290.781064][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 290.787574][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:36 executing program 3: 18:59:36 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:36 executing program 0: 18:59:36 executing program 2: 18:59:37 executing program 4: 18:59:37 executing program 3: 18:59:37 executing program 1: 18:59:37 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:37 executing program 0: 18:59:37 executing program 2: 18:59:37 executing program 4: 18:59:37 executing program 3: 18:59:37 executing program 1: [ 291.331048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 291.337614][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:37 executing program 2: 18:59:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:37 executing program 0: 18:59:37 executing program 4: 18:59:37 executing program 3: [ 291.491068][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 291.497241][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 291.503338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 291.509376][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:37 executing program 2: 18:59:37 executing program 1: 18:59:37 executing program 4: 18:59:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:37 executing program 3: 18:59:37 executing program 0: 18:59:37 executing program 2: 18:59:37 executing program 4: 18:59:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa0, &(0x7f0000000080)={[{@commit={'commit'}}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") 18:59:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x401, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="931e1f0e7f0d7cb85d13f93e9f1df2f4f816ac20fa6b83d3b11e112b3cc89b4d785b30d43d443f704046f9332d9aa27ac1e0143dd0a751477134e57bf65ab96983c039ca5739812c3bc3b895", 0x4c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = socket$tipc(0x1e, 0x0, 0x0) bind(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8c4}) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 18:59:37 executing program 0: 18:59:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:38 executing program 4: 18:59:38 executing program 2: 18:59:38 executing program 0: [ 292.289711][T11914] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:59:38 executing program 4: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400}) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 18:59:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618", 0x16, 0xe, 0x0, 0x0) 18:59:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x9}, 0xfcc7) close(r0) [ 292.471395][T11920] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:59:38 executing program 4: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400}) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 18:59:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xef, 0x0, &(0x7f0000000080)=0x4) 18:59:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x401, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="931e1f0e7f0d7cb85d13f93e9f1df2f4f816ac20fa6b83d3b11e112b3cc89b4d785b30d43d443f704046f9332d9aa27ac1e0143dd0a751477134e57bf65ab96983c039ca5739812c3bc3b895", 0x4c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = socket$tipc(0x1e, 0x0, 0x0) bind(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8c4}) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 18:59:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618", 0x16, 0xe, 0x0, 0x0) 18:59:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x1e) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:59:39 executing program 4: syz_mount_image$hfs(&(0x7f0000000280)='hfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[{@creator={'creator', 0x3d, "4b2c5be6"}}]}) 18:59:39 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) [ 293.234999][T11969] hfs: creator requires a 4 character value 18:59:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x401, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="931e1f0e7f0d7cb85d13f93e9f1df2f4f816ac20fa6b83d3b11e112b3cc89b4d785b30d43d443f704046f9332d9aa27ac1e0143dd0a751477134e57bf65ab96983c039ca5739812c3bc3b895", 0x4c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = socket$tipc(0x1e, 0x0, 0x0) bind(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8c4}) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) [ 293.303312][T11969] hfs: unable to parse mount options 18:59:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x1e) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 293.397613][T11969] hfs: creator requires a 4 character value 18:59:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000140)={[{}, {}, {0x2}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.445787][T11969] hfs: unable to parse mount options 18:59:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x100000000000011, 0x3, 0x81) bind(r1, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ftruncate(r2, 0x87ffd) sendfile(r0, r2, 0x0, 0x800000000024) 18:59:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:39 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) 18:59:39 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x0) r1 = epoll_create(0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000001c0)={@mcast1, 0x56, r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) 18:59:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000004c0)="20a3bcebe267e174de251c9b602cd620d2437b3d874ee51f80fd04300d379259b557f16d8cf8820900d7c8da3d8a6c9a406da91557855370b22c753db2def1c96264f8975d54541045ac269423eb29f9"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:59:39 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, &(0x7f0000000080)=0x54) add_key(&(0x7f0000000180)='keyring\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) 18:59:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) 18:59:40 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)='a', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x1a200) clock_gettime(0x0, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x103002, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x40000000, 0x67664fe0fa960251, [], 0x0, 0x0, &(0x7f0000000500)=""/5}, &(0x7f00000002c0)=0x50) getpgid(0xffffffffffffffff) r6 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x40) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r8 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x80000000000002}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffc, 0x42c4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401, 0x40000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x1) [ 294.183185][T12023] IPVS: ftp: loaded support on port[0] = 21 18:59:40 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="6d616e3423650000000000000000757a00e7000080001f00008100040000300100d13001007f5d099665864c530d2b3595714b00300100002805000028050000280500802805000028050000", @ANYPTR, @ANYBLOB="7f"], 0x3) 18:59:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xea, 0x0, &(0x7f0000000080)=0x4) 18:59:40 executing program 0: perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 18:59:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:40 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:59:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1800000000000060, 0x1b, 0x0, &(0x7f0000000080)="000000000000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x0, 0xf2ffffff}, 0x28) 18:59:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 295.267202][T12023] IPVS: ftp: loaded support on port[0] = 21 18:59:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe7, 0x0, &(0x7f0000000080)=0x4) 18:59:41 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) 18:59:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0xd90df9351d8ecfec, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9041a7513bf746bec66ba", 0xfe6a, 0xe, 0x0, 0x27) 18:59:41 executing program 1: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@nls={'nls', 0x3d, 'cp863'}, 0x3d}]}) 18:59:41 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)='a', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x1a200) clock_gettime(0x0, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x103002, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x40000000, 0x67664fe0fa960251, [], 0x0, 0x0, &(0x7f0000000500)=""/5}, &(0x7f00000002c0)=0x50) getpgid(0xffffffffffffffff) r6 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x40) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r8 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x80000000000002}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffc, 0x42c4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401, 0x40000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x1) [ 295.491041][ C1] net_ratelimit: 18 callbacks suppressed [ 295.491050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 295.502779][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 295.627754][T12078] ntfs: (device loop1): parse_options(): NLS character set cp863= not found. [ 295.651158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 295.657474][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 295.663520][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 295.669924][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:59:41 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, &(0x7f0000000080)=0x54) add_key(&(0x7f0000000180)='keyring\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) [ 295.769530][T12078] ntfs: (device loop1): parse_options(): NLS character set cp863= not found. 18:59:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:41 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xd, 0x0, 0x10) 18:59:41 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)='a', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x1a200) clock_gettime(0x0, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x103002, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x40000000, 0x67664fe0fa960251, [], 0x0, 0x0, &(0x7f0000000500)=""/5}, &(0x7f00000002c0)=0x50) getpgid(0xffffffffffffffff) r6 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x40) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r8 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x80000000000002}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="2900000006000f0000000500004000000400004b43da236a000000000000c0000000000000e4ddce0f44d1f869127f0f1f4cb2580000000000727e71405b57a5ecf7ae7b1562bff4c99eef500a04000000684a8645e6b024020f322903b4c5f4e09e154fb199422ba5fbe2f6b026e54b8ee2a5dd660a4de27cbf6ad872554c11f2d718a063a44b44a701c9d350cfcd68c9b06cfb20478fd4dcdc7e27c00ce8979908000000fe8b34ad5117fe175bd2879a6f2a6390c491979d17dad08768eee8813f09bae8ded663b62f0b058f8e040000000000003ab523a088facf09cfb6555cce7f3aa21b5721aa795e7927a0e2caa0a0ef5947901cdd2179958014ac2a6521e78544ff00000000000000470c1f000000000000004ceec17096c45194ca3172b5c1a171b3e59d16b5e8a7c684635c7588d90180000000000000b9cae2c4eeefc399b4ae6900010000000000006c55637d5100e0a9651856110000000000005dd5e666aa08f5c77c3e2c05355c379e1a99f750dfc2559f4889f4c8cf138b9ca63c51e18bf39519a4bf2cc6122f09c67c6a9dbdec6c64c26e5a7109c3e501b06721d46b11a83c472164b31b3e14a87a517c508fca4703fd"], 0x1a4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffc, 0x42c4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401, 0x40000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x1) [ 295.980137][T12106] IPVS: ftp: loaded support on port[0] = 21 18:59:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 296.131100][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 296.136977][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:42 executing program 1: fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x80000000, 0xfff}, &(0x7f0000000180)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1000, @mcast2}, r1}}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4) close(r0) 18:59:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) syz_open_dev$vcsa(0x0, 0x8, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000003dc0)={0x7, {{0x2, 0x0, @local}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) 18:59:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf1, 0x0, &(0x7f0000000080)=0x4) [ 296.451088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 296.457186][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000440)=[@acquire, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 18:59:42 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)='a', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x1a200) clock_gettime(0x0, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x6000000000000001, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x103002, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x40000000, 0x67664fe0fa960251, [], 0x0, 0x0, &(0x7f0000000500)=""/5}, &(0x7f00000002c0)=0x50) getpgid(0xffffffffffffffff) r6 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x40) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r8 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond0\x00', 0x80000000000002}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffc, 0x42c4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000880)=ANY=[], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x401, 0x40000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x1) [ 297.009911][T12106] IPVS: ftp: loaded support on port[0] = 21 18:59:43 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, &(0x7f0000000080)=0x54) add_key(&(0x7f0000000180)='keyring\x00', 0x0, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) 18:59:43 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/189, 0xbd}], 0x1, &(0x7f0000000340)=""/140, 0x8c}, 0x6}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/137, 0x89}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000600)=""/132, 0x84}, {&(0x7f00000006c0)=""/183, 0xb7}], 0x4, &(0x7f0000000900)=""/197, 0xc5}, 0x800}], 0x2, 0x10000, &(0x7f0000000880)={0x77359400}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x108, 0x108, 0x0, 0x108, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, &(0x7f0000000a40), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x13}, @remote, 0xffffffff, 0xffffff00, 'ip6_vti0\x00', 'sit0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x10}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x8, 0x2, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xae4, 0x6d, 0x2}}}, {{@uncond, 0x0, 0x98, 0xe0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x400, 'pptp\x00', 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 18:59:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:43 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 18:59:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4e) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x10c000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 297.427604][T12168] IPVS: ftp: loaded support on port[0] = 21 18:59:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 300.611065][ C0] net_ratelimit: 22 callbacks suppressed [ 300.611074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 300.623199][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 301.181067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 301.187233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 301.741128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 301.747416][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 301.891155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 301.897596][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 301.904137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 301.911801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 305.891131][ C1] net_ratelimit: 18 callbacks suppressed [ 305.897828][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 305.905048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 306.051138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 306.057204][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 306.063249][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 306.069407][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 306.531161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 306.537702][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 306.851198][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 306.857621][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:59:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) syz_open_dev$vcsa(0x0, 0x8, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000003dc0)={0x7, {{0x2, 0x0, @local}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) 18:59:52 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 18:59:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xeba2c28de95a78ce}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:59:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 18:59:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xeb, 0x0, &(0x7f0000000080)=0x4) 18:59:53 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x2a4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 18:59:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:53 executing program 1: userfaultfd(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 18:59:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 18:59:53 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_opts(r0, 0x11b, 0x7, 0x0, &(0x7f0000000040)) [ 311.011159][ C0] net_ratelimit: 22 callbacks suppressed [ 311.017212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 311.023289][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 311.571186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 311.577421][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 312.131093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 312.137396][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 312.291157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 312.297443][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 312.303494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 312.310478][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 316.291118][ C1] net_ratelimit: 18 callbacks suppressed [ 316.291127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 316.303698][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 316.451304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 316.457758][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 316.464050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 316.469825][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 316.931212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 316.937691][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 19:00:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f00000000c0)) 19:00:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f00000002c0), 0x80000000, &(0x7f00000003c0)) 19:00:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:03 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) [ 317.251096][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 317.256941][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 317.318429][T12235] ISOFS: Unable to identify CD-ROM format. 19:00:03 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_opts(r0, 0x11b, 0x0, 0x0, &(0x7f0000000040)=0xfffffffffffffe89) 19:00:03 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_opts(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 19:00:03 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19:00:03 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x3300, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:00:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) r1 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) gettid() ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x0, 0x7, 0x1ff, 0x0, 0xe, 0xffff, 0x6, 0x10001, 0x4, 0x5, 0xff, 0x4}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, 0xd00, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x6, 0x401, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x0, 0xc1f}, 0x0, 0x3, r1, 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) 19:00:03 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="8be61d81e12c2c4f", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c) 19:00:03 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 19:00:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) [ 317.952990][T12292] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.643021][T12294] debugfs: File '12284' in directory 'proc' already present! 19:00:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") getsockopt$inet_int(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)) 19:00:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:05 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:00:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x80000000003, 0x81000981900, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") close(r0) [ 319.637958][T12303] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.4'. 19:00:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x7f, 0x0, 0x1f, 0x0, 0x0, 0x120, 0xc, 0x0, 0x4, 0x1, 0x0, 0x4, 0x368a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x1, 0x6, 0x0, 0xff, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, @perf_bp={0x0, 0xe}, 0x8000, 0xff, 0x0, 0x7, 0x7, 0x9, 0x3}, 0x0, 0x0, r0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)=0x1) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000040)=r4, 0x52d) recvmsg(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000840)="1a0784", 0x3}, {&(0x7f0000000ec0)="1ddd391244ab060e1dd6216cec19f6cc4803f399cae11d4304f58172ba8f87d1cda1b133b384de8e81df5403c31ce26e6710008b4b9611d552d9254c7126e62cb6e95e2bca288114cf2a0da8deace30ba4f2f2d8bdab38db6c4a1b980edc067c5c3c8fcf2fa8b81d70a0fab04dab53d33298bc111fa962478fbd64a25a2b40d4685cf597a5ac959916", 0x89}, {&(0x7f0000000f80)="1b2ea32a681abd4000e4b62d2e3f74227532e8b7eda951070c466e236cc089a0cc573906f3cf1e5dba03bee97a357c5895332c377dcaea0dd439d875f072205c19cbf7c26605369cfdcf931f8d5ecd6c68c718adcb7a462bffe31496959b6702922f1ef8064229e720310fd643886b45d8fb83e1fd9fa732bf7cb0e47e3ddcb427a0e73179877e1e8f33f8b3c3f904a9492b9cb7a81135f8ab", 0x99}, {&(0x7f0000000880)="3e52cac3fafcb4e9f52b3329c0f11b407890009569796c007acdd31e66dc285646", 0x21}, {&(0x7f0000001040)="b86bd68f3cc6234370d38251b8ef1b5f1ad19bcf25388c8f6308693c9e8bdf52f8b6460d6d80b33c443f5744de98644eb616a95f02ecbd9cfd2a6b7c69f0783d0ee739fd1852eff49bb35d46ce059c22ea7021b91e6aec15aec81fce3d245ffed444277f4e4e5bde84f9da62d4c34943a686b3928313", 0x76}, {&(0x7f0000001140)="26fb0d6c945600a095ebfcff99448e67d739b10d8e881de78c32fe03763fab515e772c8b7380f2d09ac06f87b6afa1363a5c269284be258d642b8d233cdf0cfccd0be698dfb303f26f2015f6006f34965eb2bc06b3c180ab61341da23fc0ec60468ff72007f10d5b055a60059f40b8f4f46d75d867ee77e2a028d95c0779109de3d219d15770814c6d3120fd9ae27f8814ae1fb366c022cdd824339b286b9985116f027808330effbe568e3de964f414f0e6767eba1d1dc72c71dcad7bcecd7cc6ab1042a9c1e6a48c1858bc6edadbc083bcdd1d8b873c164a02ce7497effa59e52a3f24849bbd373fa6bd60ed4bb069ee46a9e7", 0xf4}, {&(0x7f0000001240)="b9c459f19551f46aa0d0a7a1b918979d192e9fd8162a2f0306e1d04c1579dbc5240c55749dcbf17d955ba7570fc792460661c2af5799aa6be2ce29613a", 0x3d}, {&(0x7f0000001280)="68c10ce1cba082a7639c3f92c2905451451bc2f8fa8b03f7bac748511297c2c89a870a8818882f8d2d9da0dba326e5d156efe9a0627a3a43cd5de6372ae084a2f2d94336152d3f27ea6d7beb93689be62aa6992d", 0x54}], 0x8, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x100000000}}], 0x50}, 0x4000000) socket$kcm(0xa, 0x8000000, 0x11) close(r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000800)=r3) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000140)='.\x02', 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000006c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000000c0)=@xdp={0x2c, 0x2, 0x0, 0x1e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="a165bb186a1eca144e09aee692ae9262be77b546e70efcdc56616ab2588465a37dee20327bad92b9031ee91d30897172ec71b4cbee4bbda95c426b948f6d35290209c6c206c4067d4dfbc784da5a17d906314492f846f1be532558272a629ac00e3cd7697dd25393daffc8dca56805d1d126b625ca90bf04ecb54d7a9fa82b1a4138297d061f78d8b91f5392b5b2dcffd7ec53ca1331330ca3ef5155ad66a4f86e7d1a3c30dcad4a59c3f14e19d63f40f18ad56512e491f55efc8728", 0xbc}, {&(0x7f0000000440)="78c4a37cfa4da239178e588938cfcc859c2dee686c40fe7330bc1e0239d1c09a02c51af84322af3e34396825f80abb16deb3f09e1cecc4b9209d1a28326426ef54dee96d8a439d89436bd0f1fc49cfb20ceff2c9f28933f255a33e8fe1eaf949f2ed773a593d0ecd682beef972be6c98602045b177168a4277a0c6bb585e16c618b46c48de3dff60d99a", 0x8a}, {&(0x7f0000000200)="11a0bf03", 0x4}, {&(0x7f0000000500)="87412462235e92778d3e9761ea0e204065b6501d0b66c21eda90924571ab41576bfaafa80f0f3ae4440859d0a31ff05171f2eeeb1a93999c8b4bbd04c31e95375f", 0x41}, {&(0x7f0000000580)="f02476", 0x3}, {&(0x7f00000005c0)="28c35305c9fe0b2fba24dfec0ac2192160bbd96b8d0ebd44e992ff040db0b135eebf585055f215f301d1576dc83b170ff51f8ab1cef5979660b28d7ced93f3b05789ba05b95c587c1f95d4fc34ab2b6e435da3170052bc7dd301309a4b74a3b10bc2a56a5b9b952113127c4aed30cc4366562faee52d0e4e42f14e2b01bd815466633141fc38b940aaca65a1fcb57c5cba7b0afad256db952febcc4d3253e9dcf049d9fb7996532aac0b06a096596b77c9293736c3d131533e87a9ba5887ceffd7", 0xc1}], 0x6}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000900)='memory.events\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) 19:00:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:05 executing program 2: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) fstat(r1, 0x0) 19:00:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 319.899125][T12326] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.4'. 19:00:05 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) sendfile(r0, r0, 0x0, 0x7fffffff) [ 320.103196][ T26] audit: type=1800 audit(1566846006.059:35): pid=12332 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17040 res=0 [ 321.411073][ C0] net_ratelimit: 22 callbacks suppressed [ 321.411082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 321.423119][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:07 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_opts(r0, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) 19:00:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x3) r2 = memfd_create(0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x80000) dup3(r2, 0xffffffffffffffff, 0x0) 19:00:07 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 321.898918][T12348] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.4'. 19:00:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) 19:00:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:07 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) [ 321.971095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 321.977429][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:08 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="03d74daf34b046605d25e5151ad26874058143207a32cd9858d67135ecc3440a2cd139b76620e6e8ace6c14e", 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000480)=[@register_looper={0x40406300}], 0x0, 0x0, 0x0}) 19:00:08 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) [ 322.531033][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 322.539201][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 322.691118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 322.697195][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 322.703965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 322.709831][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) 19:00:10 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_opts(r0, 0x11b, 0x7, 0x0, &(0x7f0000000040)) 19:00:10 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="03d74daf34b046605d25e5151ad26874058143207a32cd9858d67135ecc3440a2cd139b76620e6e8ace6c14e", 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000480)=[@register_looper={0x40406300}], 0x0, 0x0, 0x0}) 19:00:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:10 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:10 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:00:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:10 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:10 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000280), 0x40000000, &(0x7f0000000300)) 19:00:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:10 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="fb0000002e000138bfa9d345e7eb8d99c1ffffffffffffff43bc59198183fe204ee2d7080000000600000000000000801d5291d76b8c67452107132daffa33021eb82169b94b598296263578b72935c922974adced71c22b987fa68c5bb731c5f64e93ea793c262f67b56acbb4bac0c4c4f9d0c4437e99c25a7d9d3ffd47893808c33bc1fbab650cdcafa532cc524ea85b198cb49066bf549933875e91431da2f42c88d613be8f1376090e88a06412d5160d7f1b0f47d951f5f7a371a861b9390ddbad539ef278168ac8d157a656737a7ac0226d366ccec93f9f070000000000008e9234feee7baa2acd2683d48904fb31053ccb49a675fc28ce02", 0xfb}], 0x1}, 0x0) 19:00:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) 19:00:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:12 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 19:00:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:00:12 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:12 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:00:12 executing program 4: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="fb0000002e000138bfa9d345e7eb8d99c1ffffffffffffff43bc59198183fe204ee2d7080000000600000000000000801d5291d76b8c67452107132daffa33021eb82169b94b598296263578b72935c922974adced71c22b987fa68c5bb731c5f64e93ea793c262f67b56acbb4bac0c4c4f9d0c4437e99c25a7d9d3ffd47893808c33bc1fbab650cdcafa532cc524ea85b198cb49066bf549933875e91431da2f42c88d613be8f1376090e88a06412d5160d7f1b0f47d951f5f7a371a861b9390ddbad539ef278168ac8d157a656737a7ac0226d366ccec93f9f070000000000008e9234feee7baa2acd2683d48904fb31053ccb49a675fc28ce02", 0xfb}], 0x1}, 0x0) 19:00:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, 0x0) 19:00:12 executing program 4: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:12 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:00:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, 0x0) [ 326.691099][ C1] net_ratelimit: 18 callbacks suppressed [ 326.691107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 326.703265][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 326.851171][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 326.857153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 326.863450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 326.869630][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 327.331105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 327.337429][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 327.651116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 327.657408][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) 19:00:14 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:14 executing program 4: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) 19:00:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, 0x0) 19:00:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a35000/0x400000)=nil, 0x400000, 0x1000006, 0x2013, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") 19:00:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x40, 0xaad5) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r3 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280), 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x0, 0x2, 0x2, 0x41b2bdc293375207, 0x7fff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) getpgid(0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7f, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x0, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x3, r3, 0x0) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) 19:00:14 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 19:00:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 19:00:14 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x30) 19:00:15 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 19:00:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) tkill(r1, 0x401004000000016) 19:00:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 19:00:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 19:00:17 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000000)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 19:00:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000181b526bb5957004b38e0000000000000000000000000000001f00000006000000a005000058024f9f80a3306e074fd9ab0d7bd0d93c7d71c54c000000000000004000b004000000e8050000e82700cc30d04c87bb1af8499e0cd3b9cebe3b02000000e1771f61c1d9c352aa433c28337ce53f54ce3d5523599897408f5348e9caca560200000035fb843216ec6b83eb7a6a3e8f80497cce39afdfd6545993b918da07d9000000000000000000000000003875dbf4e9c2abeb7236086349441e51b06ca5fb4757630dc700000000000000000000000000001000f1"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)="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") tkill(r2, 0x17) 19:00:17 executing program 0: r0 = syz_open_dev$usb(0x0, 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 331.184594][T12517] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 331.186398][T12516] ptrace attach of "/root/syz-executor.1"[12515] was attempted by "/root/syz-executor.1"[12516] 19:00:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 19:00:17 executing program 0: r0 = syz_open_dev$usb(0x0, 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 19:00:17 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_opts(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)=0x18) [ 331.811085][ C0] net_ratelimit: 22 callbacks suppressed [ 331.811094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 331.817180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 332.371088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 332.377199][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 332.931050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 332.937319][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 333.091066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 333.097225][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 333.103482][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 333.109623][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 19:00:20 executing program 0: r0 = syz_open_dev$usb(0x0, 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) tkill(r1, 0x401004000000016) 19:00:20 executing program 2: 19:00:20 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffbfffffffc58e}) wait4(0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, &(0x7f0000000200)) 19:00:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:20 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000001480)={0xa, @pix_mp}) 19:00:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) 19:00:20 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) [ 334.566587][T12548] attempt to access beyond end of device [ 334.580164][T12548] loop5: rw=2049, want=130, limit=112 19:00:20 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) 19:00:20 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 334.630871][T12548] attempt to access beyond end of device [ 334.678444][T12548] loop5: rw=2049, want=131, limit=112 19:00:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 335.071008][T12586] attempt to access beyond end of device [ 335.084188][T12586] loop5: rw=2049, want=130, limit=112 [ 337.091063][ C1] net_ratelimit: 18 callbacks suppressed [ 337.091070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 337.103530][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 337.251049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 337.257156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 337.263333][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 337.269451][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) tkill(r1, 0x401004000000016) 19:00:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) 19:00:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) 19:00:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x120, 0xc, 0x0, 0x4, 0x1, 0x0, 0x4, 0x368a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x1, 0x6, 0x0, 0xff, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, @perf_bp={0x0, 0xe}, 0x8000, 0xff, 0x0, 0x7, 0x7, 0x9, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)=0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000040)=r4, 0x52d) recvmsg(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000840)="1a0784", 0x3}, {&(0x7f0000000ec0)="1ddd391244ab060e1dd6216cec19f6cc4803f399cae11d4304f58172ba8f87d1cda1b133b384de8e81df5403c31ce26e6710008b4b9611d552d9254c7126e62cb6e95e2bca288114cf2a0da8deace30ba4f2f2d8bdab38db6c4a1b980edc067c5c3c8fcf2fa8b81d70a0fab04dab53d33298bc111fa962478fbd64a25a2b40d4685cf597a5ac959916", 0x89}, {&(0x7f0000000f80)="1b2ea32a681abd4000e4b62d2e3f74227532e8b7eda951070c466e236cc089a0cc573906f3cf1e5dba03bee97a357c5895332c377dcaea0dd439d875f072205c19cbf7c26605369cfdcf931f8d5ecd6c68c718adcb7a462bffe31496959b6702922f1ef8064229e720310fd643886b45d8fb83e1fd9fa732bf7cb0e47e3ddcb427a0e73179877e1e8f33f8b3c3f904a9492b9cb7a81135f8ab", 0x99}, {&(0x7f0000000880)="3e52cac3fafcb4e9f52b3329c0f11b407890009569796c007acdd31e66dc285646", 0x21}, {&(0x7f0000001040)="b86bd68f3cc6234370d38251b8ef1b5f1ad19bcf25388c8f6308693c9e8bdf52f8b6460d6d80b33c443f5744de98644eb616a95f02ecbd9cfd2a6b7c69f0783d0ee739fd1852eff49bb35d46ce059c22ea7021b91e6aec15aec81fce3d245ffed444277f4e4e5bde84f9da62d4c34943a686b3928313", 0x76}, {&(0x7f0000001140)="26fb0d6c945600a095ebfcff99448e67d739b10d8e881de78c32fe03763fab515e772c8b7380f2d09ac06f87b6afa1363a5c269284be258d642b8d233cdf0cfccd0be698dfb303f26f2015f6006f34965eb2bc06b3c180ab61341da23fc0ec60468ff72007f10d5b055a60059f40b8f4f46d75d867ee77e2a028d95c0779109de3d219d15770814c6d3120fd9ae27f8814ae1fb366c022cdd824339b286b9985116f027808330effbe568e3de964f414f0e6767eba1d1dc72c71dcad7bcecd7cc6ab1042a9c1e6a48c1858bc6edadbc083bcdd1d8b873c164a02ce7497effa59e52a3f24849bbd373fa6bd60ed4bb069ee46a9e7", 0xf4}, {&(0x7f0000001240)="b9c459f19551f46aa0d0a7a1b918979d192e9fd8162a2f0306e1d04c1579dbc5240c55749dcbf17d955ba7570fc792460661c2af5799aa6be2ce29613a", 0x3d}, {&(0x7f0000001280)="68c10ce1cba082a7639c3f92c2905451451bc2f8fa8b03f7bac748511297c2c89a870a8818882f8d2d9da0dba326e5d156efe9a0627a3a43cd5de6372ae084a2f2d94336152d3f27ea6d7beb93689be62aa6992d", 0x54}], 0x8, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x100000000}}], 0x50}, 0x4000000) socket$kcm(0xa, 0x8000000, 0x11) close(r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000800)=r3) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000140)='.\x02', 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000006c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000000c0)=@xdp={0x2c, 0x2, 0x0, 0x1e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="a165bb186a1eca144e09aee692ae9262be77b546e70efcdc56616ab2588465a37dee20327bad92b9031ee91d30897172ec71b4cbee4bbda95c426b948f6d35290209c6c206c4067d4dfbc784da5a17d906314492f846f1be532558272a629ac00e3cd7697dd25393daffc8dca56805d1d126b625ca90bf04ecb54d7a9fa82b1a4138297d061f78d8b91f5392b5b2dcffd7ec53ca1331330ca3ef5155ad66a4f86e7d1a3c30dcad4a59c3f14e19d63f40f18ad56512e491f55efc8728", 0xbc}, {&(0x7f0000000440)="78c4a37cfa4da239178e588938cfcc859c2dee686c40fe7330bc1e0239d1c09a02c51af84322af3e34396825f80abb16deb3f09e1cecc4b9209d1a28326426ef54dee96d8a439d89436bd0f1fc49cfb20ceff2c9f28933f255a33e8fe1eaf949f2ed773a593d0ecd682beef972be6c98602045b177168a4277a0c6bb585e16c618b46c48de3dff60d99a", 0x8a}, {&(0x7f0000000200)="11a0bf03", 0x4}, {&(0x7f0000000500)="87412462235e92778d3e9761ea0e204065b6501d0b66c21eda90924571ab41576bfaafa80f0f3ae4440859d0a31ff05171f2eeeb1a93999c8b4bbd04c31e95375f", 0x41}, {&(0x7f0000000580)="f02476", 0x3}, {&(0x7f00000005c0)="28c35305c9fe0b2fba24dfec0ac2192160bbd96b8d0ebd44e992ff040db0b135eebf585055f215f301d1576dc83b170ff51f8ab1cef5979660b28d7ced93f3b05789ba05b95c587c1f95d4fc34ab2b6e435da3170052bc7dd301309a4b74a3b10bc2a56a5b9b952113127c4aed30cc4366562faee52d0e4e42f14e2b01bd815466633141fc38b940aaca65a1fcb57c5cba7b0afad256db952febcc4d3253e9dcf049d9fb7996532aac0b06a096596b77c9293736c3d131533e87a9ba5887ceffd7", 0xc1}], 0x6}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000900)='memory.events\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) 19:00:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) [ 337.501083][T12604] mkiss: ax0: crc mode is auto. 19:00:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:23 executing program 1: 19:00:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x120, 0xc, 0x0, 0x4, 0x1, 0x0, 0x4, 0x368a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x1, 0x6, 0x0, 0xff, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, @perf_bp={0x0, 0xe}, 0x8000, 0xff, 0x0, 0x7, 0x7, 0x9, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)=0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000040)=r4, 0x52d) recvmsg(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000840)="1a0784", 0x3}, {&(0x7f0000000ec0)="1ddd391244ab060e1dd6216cec19f6cc4803f399cae11d4304f58172ba8f87d1cda1b133b384de8e81df5403c31ce26e6710008b4b9611d552d9254c7126e62cb6e95e2bca288114cf2a0da8deace30ba4f2f2d8bdab38db6c4a1b980edc067c5c3c8fcf2fa8b81d70a0fab04dab53d33298bc111fa962478fbd64a25a2b40d4685cf597a5ac959916", 0x89}, {&(0x7f0000000f80)="1b2ea32a681abd4000e4b62d2e3f74227532e8b7eda951070c466e236cc089a0cc573906f3cf1e5dba03bee97a357c5895332c377dcaea0dd439d875f072205c19cbf7c26605369cfdcf931f8d5ecd6c68c718adcb7a462bffe31496959b6702922f1ef8064229e720310fd643886b45d8fb83e1fd9fa732bf7cb0e47e3ddcb427a0e73179877e1e8f33f8b3c3f904a9492b9cb7a81135f8ab", 0x99}, {&(0x7f0000000880)="3e52cac3fafcb4e9f52b3329c0f11b407890009569796c007acdd31e66dc285646", 0x21}, {&(0x7f0000001040)="b86bd68f3cc6234370d38251b8ef1b5f1ad19bcf25388c8f6308693c9e8bdf52f8b6460d6d80b33c443f5744de98644eb616a95f02ecbd9cfd2a6b7c69f0783d0ee739fd1852eff49bb35d46ce059c22ea7021b91e6aec15aec81fce3d245ffed444277f4e4e5bde84f9da62d4c34943a686b3928313", 0x76}, {&(0x7f0000001140)="26fb0d6c945600a095ebfcff99448e67d739b10d8e881de78c32fe03763fab515e772c8b7380f2d09ac06f87b6afa1363a5c269284be258d642b8d233cdf0cfccd0be698dfb303f26f2015f6006f34965eb2bc06b3c180ab61341da23fc0ec60468ff72007f10d5b055a60059f40b8f4f46d75d867ee77e2a028d95c0779109de3d219d15770814c6d3120fd9ae27f8814ae1fb366c022cdd824339b286b9985116f027808330effbe568e3de964f414f0e6767eba1d1dc72c71dcad7bcecd7cc6ab1042a9c1e6a48c1858bc6edadbc083bcdd1d8b873c164a02ce7497effa59e52a3f24849bbd373fa6bd60ed4bb069ee46a9e7", 0xf4}, {&(0x7f0000001240)="b9c459f19551f46aa0d0a7a1b918979d192e9fd8162a2f0306e1d04c1579dbc5240c55749dcbf17d955ba7570fc792460661c2af5799aa6be2ce29613a", 0x3d}, {&(0x7f0000001280)="68c10ce1cba082a7639c3f92c2905451451bc2f8fa8b03f7bac748511297c2c89a870a8818882f8d2d9da0dba326e5d156efe9a0627a3a43cd5de6372ae084a2f2d94336152d3f27ea6d7beb93689be62aa6992d", 0x54}], 0x8, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x100000000}}], 0x50}, 0x4000000) socket$kcm(0xa, 0x8000000, 0x11) close(r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000800)=r3) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000140)='.\x02', 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000006c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000000c0)=@xdp={0x2c, 0x2, 0x0, 0x1e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="a165bb186a1eca144e09aee692ae9262be77b546e70efcdc56616ab2588465a37dee20327bad92b9031ee91d30897172ec71b4cbee4bbda95c426b948f6d35290209c6c206c4067d4dfbc784da5a17d906314492f846f1be532558272a629ac00e3cd7697dd25393daffc8dca56805d1d126b625ca90bf04ecb54d7a9fa82b1a4138297d061f78d8b91f5392b5b2dcffd7ec53ca1331330ca3ef5155ad66a4f86e7d1a3c30dcad4a59c3f14e19d63f40f18ad56512e491f55efc8728", 0xbc}, {&(0x7f0000000440)="78c4a37cfa4da239178e588938cfcc859c2dee686c40fe7330bc1e0239d1c09a02c51af84322af3e34396825f80abb16deb3f09e1cecc4b9209d1a28326426ef54dee96d8a439d89436bd0f1fc49cfb20ceff2c9f28933f255a33e8fe1eaf949f2ed773a593d0ecd682beef972be6c98602045b177168a4277a0c6bb585e16c618b46c48de3dff60d99a", 0x8a}, {&(0x7f0000000200)="11a0bf03", 0x4}, {&(0x7f0000000500)="87412462235e92778d3e9761ea0e204065b6501d0b66c21eda90924571ab41576bfaafa80f0f3ae4440859d0a31ff05171f2eeeb1a93999c8b4bbd04c31e95375f", 0x41}, {&(0x7f0000000580)="f02476", 0x3}, {&(0x7f00000005c0)="28c35305c9fe0b2fba24dfec0ac2192160bbd96b8d0ebd44e992ff040db0b135eebf585055f215f301d1576dc83b170ff51f8ab1cef5979660b28d7ced93f3b05789ba05b95c587c1f95d4fc34ab2b6e435da3170052bc7dd301309a4b74a3b10bc2a56a5b9b952113127c4aed30cc4366562faee52d0e4e42f14e2b01bd815466633141fc38b940aaca65a1fcb57c5cba7b0afad256db952febcc4d3253e9dcf049d9fb7996532aac0b06a096596b77c9293736c3d131533e87a9ba5887ceffd7", 0xc1}], 0x6}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000900)='memory.events\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) [ 337.731079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 337.737093][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x120, 0xc, 0x0, 0x4, 0x1, 0x0, 0x4, 0x368a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x1, 0x6, 0x0, 0xff, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, @perf_bp={0x0, 0xe}, 0x8000, 0xff, 0x0, 0x7, 0x7, 0x9, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)=0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000040)=r4, 0x52d) recvmsg(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000840)="1a0784", 0x3}, {&(0x7f0000000ec0)="1ddd391244ab060e1dd6216cec19f6cc4803f399cae11d4304f58172ba8f87d1cda1b133b384de8e81df5403c31ce26e6710008b4b9611d552d9254c7126e62cb6e95e2bca288114cf2a0da8deace30ba4f2f2d8bdab38db6c4a1b980edc067c5c3c8fcf2fa8b81d70a0fab04dab53d33298bc111fa962478fbd64a25a2b40d4685cf597a5ac959916", 0x89}, {&(0x7f0000000f80)="1b2ea32a681abd4000e4b62d2e3f74227532e8b7eda951070c466e236cc089a0cc573906f3cf1e5dba03bee97a357c5895332c377dcaea0dd439d875f072205c19cbf7c26605369cfdcf931f8d5ecd6c68c718adcb7a462bffe31496959b6702922f1ef8064229e720310fd643886b45d8fb83e1fd9fa732bf7cb0e47e3ddcb427a0e73179877e1e8f33f8b3c3f904a9492b9cb7a81135f8ab", 0x99}, {&(0x7f0000000880)="3e52cac3fafcb4e9f52b3329c0f11b407890009569796c007acdd31e66dc285646", 0x21}, {&(0x7f0000001040)="b86bd68f3cc6234370d38251b8ef1b5f1ad19bcf25388c8f6308693c9e8bdf52f8b6460d6d80b33c443f5744de98644eb616a95f02ecbd9cfd2a6b7c69f0783d0ee739fd1852eff49bb35d46ce059c22ea7021b91e6aec15aec81fce3d245ffed444277f4e4e5bde84f9da62d4c34943a686b3928313", 0x76}, {&(0x7f0000001140)="26fb0d6c945600a095ebfcff99448e67d739b10d8e881de78c32fe03763fab515e772c8b7380f2d09ac06f87b6afa1363a5c269284be258d642b8d233cdf0cfccd0be698dfb303f26f2015f6006f34965eb2bc06b3c180ab61341da23fc0ec60468ff72007f10d5b055a60059f40b8f4f46d75d867ee77e2a028d95c0779109de3d219d15770814c6d3120fd9ae27f8814ae1fb366c022cdd824339b286b9985116f027808330effbe568e3de964f414f0e6767eba1d1dc72c71dcad7bcecd7cc6ab1042a9c1e6a48c1858bc6edadbc083bcdd1d8b873c164a02ce7497effa59e52a3f24849bbd373fa6bd60ed4bb069ee46a9e7", 0xf4}, {&(0x7f0000001240)="b9c459f19551f46aa0d0a7a1b918979d192e9fd8162a2f0306e1d04c1579dbc5240c55749dcbf17d955ba7570fc792460661c2af5799aa6be2ce29613a", 0x3d}, {&(0x7f0000001280)="68c10ce1cba082a7639c3f92c2905451451bc2f8fa8b03f7bac748511297c2c89a870a8818882f8d2d9da0dba326e5d156efe9a0627a3a43cd5de6372ae084a2f2d94336152d3f27ea6d7beb93689be62aa6992d", 0x54}], 0x8, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x100000000}}], 0x50}, 0x4000000) socket$kcm(0xa, 0x8000000, 0x11) close(r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000800)=r3) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000140)='.\x02', 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000006c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000000c0)=@xdp={0x2c, 0x2, 0x0, 0x1e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="a165bb186a1eca144e09aee692ae9262be77b546e70efcdc56616ab2588465a37dee20327bad92b9031ee91d30897172ec71b4cbee4bbda95c426b948f6d35290209c6c206c4067d4dfbc784da5a17d906314492f846f1be532558272a629ac00e3cd7697dd25393daffc8dca56805d1d126b625ca90bf04ecb54d7a9fa82b1a4138297d061f78d8b91f5392b5b2dcffd7ec53ca1331330ca3ef5155ad66a4f86e7d1a3c30dcad4a59c3f14e19d63f40f18ad56512e491f55efc8728", 0xbc}, {&(0x7f0000000440)="78c4a37cfa4da239178e588938cfcc859c2dee686c40fe7330bc1e0239d1c09a02c51af84322af3e34396825f80abb16deb3f09e1cecc4b9209d1a28326426ef54dee96d8a439d89436bd0f1fc49cfb20ceff2c9f28933f255a33e8fe1eaf949f2ed773a593d0ecd682beef972be6c98602045b177168a4277a0c6bb585e16c618b46c48de3dff60d99a", 0x8a}, {&(0x7f0000000200)="11a0bf03", 0x4}, {&(0x7f0000000500)="87412462235e92778d3e9761ea0e204065b6501d0b66c21eda90924571ab41576bfaafa80f0f3ae4440859d0a31ff05171f2eeeb1a93999c8b4bbd04c31e95375f", 0x41}, {&(0x7f0000000580)="f02476", 0x3}, {&(0x7f00000005c0)="28c35305c9fe0b2fba24dfec0ac2192160bbd96b8d0ebd44e992ff040db0b135eebf585055f215f301d1576dc83b170ff51f8ab1cef5979660b28d7ced93f3b05789ba05b95c587c1f95d4fc34ab2b6e435da3170052bc7dd301309a4b74a3b10bc2a56a5b9b952113127c4aed30cc4366562faee52d0e4e42f14e2b01bd815466633141fc38b940aaca65a1fcb57c5cba7b0afad256db952febcc4d3253e9dcf049d9fb7996532aac0b06a096596b77c9293736c3d131533e87a9ba5887ceffd7", 0xc1}], 0x6}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000900)='memory.events\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) 19:00:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) 19:00:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) [ 338.051074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 338.057150][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) 19:00:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:26 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x120, 0xc, 0x0, 0x4, 0x1, 0x0, 0x4, 0x368a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x1, 0x6, 0x0, 0xff, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, @perf_bp={0x0, 0xe}, 0x8000, 0xff, 0x0, 0x7, 0x7, 0x9, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)=0x1) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000040)=r4, 0x52d) recvmsg(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000840)="1a0784", 0x3}, {&(0x7f0000000ec0)="1ddd391244ab060e1dd6216cec19f6cc4803f399cae11d4304f58172ba8f87d1cda1b133b384de8e81df5403c31ce26e6710008b4b9611d552d9254c7126e62cb6e95e2bca288114cf2a0da8deace30ba4f2f2d8bdab38db6c4a1b980edc067c5c3c8fcf2fa8b81d70a0fab04dab53d33298bc111fa962478fbd64a25a2b40d4685cf597a5ac959916", 0x89}, {&(0x7f0000000f80)="1b2ea32a681abd4000e4b62d2e3f74227532e8b7eda951070c466e236cc089a0cc573906f3cf1e5dba03bee97a357c5895332c377dcaea0dd439d875f072205c19cbf7c26605369cfdcf931f8d5ecd6c68c718adcb7a462bffe31496959b6702922f1ef8064229e720310fd643886b45d8fb83e1fd9fa732bf7cb0e47e3ddcb427a0e73179877e1e8f33f8b3c3f904a9492b9cb7a81135f8ab", 0x99}, {&(0x7f0000000880)="3e52cac3fafcb4e9f52b3329c0f11b407890009569796c007acdd31e66dc285646", 0x21}, {&(0x7f0000001040)="b86bd68f3cc6234370d38251b8ef1b5f1ad19bcf25388c8f6308693c9e8bdf52f8b6460d6d80b33c443f5744de98644eb616a95f02ecbd9cfd2a6b7c69f0783d0ee739fd1852eff49bb35d46ce059c22ea7021b91e6aec15aec81fce3d245ffed444277f4e4e5bde84f9da62d4c34943a686b3928313", 0x76}, {&(0x7f0000001140)="26fb0d6c945600a095ebfcff99448e67d739b10d8e881de78c32fe03763fab515e772c8b7380f2d09ac06f87b6afa1363a5c269284be258d642b8d233cdf0cfccd0be698dfb303f26f2015f6006f34965eb2bc06b3c180ab61341da23fc0ec60468ff72007f10d5b055a60059f40b8f4f46d75d867ee77e2a028d95c0779109de3d219d15770814c6d3120fd9ae27f8814ae1fb366c022cdd824339b286b9985116f027808330effbe568e3de964f414f0e6767eba1d1dc72c71dcad7bcecd7cc6ab1042a9c1e6a48c1858bc6edadbc083bcdd1d8b873c164a02ce7497effa59e52a3f24849bbd373fa6bd60ed4bb069ee46a9e7", 0xf4}, {&(0x7f0000001240)="b9c459f19551f46aa0d0a7a1b918979d192e9fd8162a2f0306e1d04c1579dbc5240c55749dcbf17d955ba7570fc792460661c2af5799aa6be2ce29613a", 0x3d}, {&(0x7f0000001280)="68c10ce1cba082a7639c3f92c2905451451bc2f8fa8b03f7bac748511297c2c89a870a8818882f8d2d9da0dba326e5d156efe9a0627a3a43cd5de6372ae084a2f2d94336152d3f27ea6d7beb93689be62aa6992d", 0x54}], 0x8, &(0x7f00000013c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x100000000}}], 0x50}, 0x4000000) socket$kcm(0xa, 0x8000000, 0x11) close(r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000800)=r3) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000140)='.\x02', 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000006c0), 0x4) sendmsg$kcm(r1, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000000c0)=@xdp={0x2c, 0x2, 0x0, 0x1e}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="a165bb186a1eca144e09aee692ae9262be77b546e70efcdc56616ab2588465a37dee20327bad92b9031ee91d30897172ec71b4cbee4bbda95c426b948f6d35290209c6c206c4067d4dfbc784da5a17d906314492f846f1be532558272a629ac00e3cd7697dd25393daffc8dca56805d1d126b625ca90bf04ecb54d7a9fa82b1a4138297d061f78d8b91f5392b5b2dcffd7ec53ca1331330ca3ef5155ad66a4f86e7d1a3c30dcad4a59c3f14e19d63f40f18ad56512e491f55efc8728", 0xbc}, {&(0x7f0000000440)="78c4a37cfa4da239178e588938cfcc859c2dee686c40fe7330bc1e0239d1c09a02c51af84322af3e34396825f80abb16deb3f09e1cecc4b9209d1a28326426ef54dee96d8a439d89436bd0f1fc49cfb20ceff2c9f28933f255a33e8fe1eaf949f2ed773a593d0ecd682beef972be6c98602045b177168a4277a0c6bb585e16c618b46c48de3dff60d99a", 0x8a}, {&(0x7f0000000200)="11a0bf03", 0x4}, {&(0x7f0000000500)="87412462235e92778d3e9761ea0e204065b6501d0b66c21eda90924571ab41576bfaafa80f0f3ae4440859d0a31ff05171f2eeeb1a93999c8b4bbd04c31e95375f", 0x41}, {&(0x7f0000000580)="f02476", 0x3}, {&(0x7f00000005c0)="28c35305c9fe0b2fba24dfec0ac2192160bbd96b8d0ebd44e992ff040db0b135eebf585055f215f301d1576dc83b170ff51f8ab1cef5979660b28d7ced93f3b05789ba05b95c587c1f95d4fc34ab2b6e435da3170052bc7dd301309a4b74a3b10bc2a56a5b9b952113127c4aed30cc4366562faee52d0e4e42f14e2b01bd815466633141fc38b940aaca65a1fcb57c5cba7b0afad256db952febcc4d3253e9dcf049d9fb7996532aac0b06a096596b77c9293736c3d131533e87a9ba5887ceffd7", 0xc1}], 0x6}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000900)='memory.events\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) 19:00:26 executing program 1: 19:00:26 executing program 1: 19:00:26 executing program 0: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)}], 0x1}, 0x0) 19:00:26 executing program 2: 19:00:26 executing program 1: 19:00:26 executing program 0: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) [ 342.211046][ C0] net_ratelimit: 22 callbacks suppressed [ 342.211056][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 342.223143][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 342.772437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 342.786976][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 343.331053][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 343.337303][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 343.491126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 343.497084][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 343.503243][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 343.509794][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)}], 0x1}, 0x0) 19:00:29 executing program 1: 19:00:29 executing program 2: 19:00:29 executing program 0: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x80123, 0x2}) 19:00:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:00:29 executing program 2: 19:00:29 executing program 1: 19:00:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)}], 0x1}, 0x0) 19:00:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 19:00:30 executing program 1: 19:00:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="fb0000002e000138bfa9d345e7eb8d99c1ffffffffffffff43bc59198183fe204ee2d7080000000600000000000000801d5291d76b8c67452107132daffa33021eb82169b94b598296263578b72935c922974adced71c22b987fa68c5bb731c5f64e93ea793c262f67b56acbb4bac0c4c4f9d0c4437e99c25a7d9d3ffd47", 0x7e}], 0x1}, 0x0) [ 344.174881][T12697] attempt to access beyond end of device [ 344.191429][T12697] loop5: rw=2049, want=130, limit=112 19:00:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:32 executing program 2: 19:00:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 19:00:32 executing program 1: 19:00:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="fb", 0x1}], 0x1}, 0x0) 19:00:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:00:33 executing program 2: 19:00:33 executing program 1: 19:00:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)}], 0x1}, 0x0) 19:00:33 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 19:00:33 executing program 1: 19:00:33 executing program 2: [ 347.324000][T12729] attempt to access beyond end of device [ 347.360489][T12729] loop5: rw=2049, want=130, limit=112 [ 347.491032][ C1] net_ratelimit: 18 callbacks suppressed [ 347.491041][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.503070][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 347.651072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.657600][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 347.663941][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.669951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 348.131060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.137002][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 348.451060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.457247][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)}], 0x1}, 0x0) 19:00:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x2}) 19:00:36 executing program 1: 19:00:36 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:00:36 executing program 2: 19:00:36 executing program 2: 19:00:36 executing program 1: [ 350.277067][T12766] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 19:00:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)}], 0x1}, 0x0) 19:00:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x2}) 19:00:36 executing program 1: 19:00:36 executing program 4: [ 350.587898][T12781] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 19:00:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:38 executing program 2: 19:00:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x2}) 19:00:38 executing program 4: 19:00:38 executing program 1: 19:00:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:38 executing program 4: 19:00:38 executing program 1: [ 352.543055][T12793] vhci_hcd: default hub control req: 0000 v0000 i0002 l0 19:00:38 executing program 2: [ 352.611114][ C0] net_ratelimit: 22 callbacks suppressed [ 352.611123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 352.617599][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123}) 19:00:38 executing program 4: 19:00:38 executing program 1: [ 352.841577][T12810] vhci_hcd: invalid port number 0 [ 353.171057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 353.176995][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 353.731047][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.737016][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 353.891089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.897125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 353.903577][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.909717][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:40 executing program 2: 19:00:40 executing program 1: 19:00:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123}) 19:00:40 executing program 4: 19:00:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:40 executing program 4: [ 354.800185][T12827] vhci_hcd: invalid port number 0 19:00:40 executing program 1: 19:00:40 executing program 2: 19:00:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80123}) 19:00:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x13) close(r0) 19:00:41 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) r0 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0x0, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x0, 0x73d9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x6, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x0, 0x6, 0x0, 0x8880}, 0x0, 0x3, r0, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, r2) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)) [ 355.025108][T12821] attempt to access beyond end of device [ 355.033937][T12821] loop5: rw=2049, want=130, limit=112 [ 355.043004][T12841] vhci_hcd: invalid port number 0 19:00:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401004000000016) 19:00:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:42 executing program 2: 19:00:42 executing program 0: 19:00:42 executing program 1: 19:00:42 executing program 4: 19:00:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x80800) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x40c5, 0x0) getuid() r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) 19:00:42 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{}, "0219380b5dd88967", "73697b11d7a5f278830dbd200837a35a", "871d42bf", "e99da01823f05ac0"}, 0x28) 19:00:42 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'y\x00'}]}, 0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x88000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) close(r1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:00:42 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030300900fc9cd866b42938ab01426249b39d9b281a9b3672476a814ac42843aa88e1db60ba47b6bb30407402000000349f062e4624400100000000000000e03a80b9374275d0f7b100237209ffe467ab081296c3c5085a515cf18151210b8615d54f1c7f3e9ef2ec1577c935216a586171a0aca40d531e7d4986fe59ec1406936a1b561565ffefd7652e6c949d9a7f95f42d36d892d4b30cc1fc50434686595553e6f3381cf655df317fe9ca3533e7afb1ced5c006e691b4999cf6c0aae1178e256baacb07e6f80b9f8e6b2dd919e5ec9ec4f3b57d528930399f5c7903c06e4298f2d6774ba4d327c8c4c783340d84b8252dc0961fdc1816a67772058c027c49111761cd867b446e1d09fc35834cb3e8e0ed7bde47964dc091ec1ce2dd7bfa8c430600000000000000ce550d9645db0c58453350fa101f5aae17559fcfd2bd00000000c2621a68a28ccc39235cdf20d22060d3c8f352e341635ee4eeb0aad9d953e0a7dd37de2bfc4fc5d81bfa4264c89a612bf74868309f840cc82f1cb476a4eaa8728c34272f7fe63fe0"], 0x15) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RRENAME(r1, &(0x7f00000001c0)={0x7}, 0x7) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 357.113141][T12859] attempt to access beyond end of device [ 357.141419][T12859] loop5: rw=2049, want=130, limit=112 19:00:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000100)={0xff, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0x1, 'lblc\x00', 0x4, 0x0, 0x43}, 0x2c) [ 357.203959][ T26] audit: type=1800 audit(1566846043.159:36): pid=12883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17257 res=0 19:00:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 357.891560][ C1] net_ratelimit: 18 callbacks suppressed [ 357.891569][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 357.904637][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 358.051073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 358.057048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 358.063104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 358.069004][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 358.531060][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.536996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 358.851052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 358.857214][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401004000000016) 19:00:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000001c0)=""/196, &(0x7f0000000080)=0xc4) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:45 executing program 0: 19:00:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000100)={0xff, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0x1, 'lblc\x00', 0x4, 0x0, 0x43}, 0x2c) 19:00:45 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'y\x00'}]}, 0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x88000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) close(r1) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 19:00:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:45 executing program 0: 19:00:45 executing program 4: 19:00:45 executing program 1: 19:00:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf0, 0x0, &(0x7f0000000080)=0x4) 19:00:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf2, 0x0, &(0x7f0000000080)=0x4) [ 359.657893][T12906] attempt to access beyond end of device [ 359.681216][T12906] loop5: rw=2049, want=130, limit=112 19:00:45 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401004000000016) 19:00:47 executing program 4: 19:00:47 executing program 1: 19:00:47 executing program 2: 19:00:47 executing program 0: 19:00:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:47 executing program 2: 19:00:47 executing program 1: 19:00:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="020328bd7000ffdbdf25110000001c00090008000200000800000800010004000000080001000300000010000200080002008000000004000400cc000500340002000800010003000000080004002000000008000300070000000800040000000000080001000b0000000800040002000000080001006962000054000200080001000d00000008000100060000000800040001010000080004008100000008000300caf8ffff0800030006000000080001000220000008000400a9000002080004000000ffff0800040001000100080001007564700024000200080001000b00000008000200000000000800040009000000080003007f0000000c00020008000100150000001000060004000200040002000400020044000700080001006a000000080000040000000c0003000300000000000000080002000001000008000100788300000c00030001000000000000001cd20460ac488895f114713cb4451a000cb042c25acd52a4ca6a704b8cf07b1466cc927e3b39d20b9125c185e438c36746a58e6d2cb2a8dc4de376d9568aac339df0bfa997d0290a014a629ed7234b504c186760d4889b68ffc97f787a7478cbff34257128056a65a5c0cc8152e3e5cafc23b42ecf92c88033855abb53bab8b2e60e4bddba8f5561749aea786b0b265b091f8da51a4f7e42cd03972557ef929c345d169be0d71bff710de1de2f282d4ea58fdd7a307545b8db33c6f0929d604ea2ae3284733a0ad549"], 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0x18}], 0x4924924924927e1, 0x0) 19:00:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/339], 0xf4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf1"], 0x0, 0x0, 0x0}) [ 361.976510][T12948] attempt to access beyond end of device [ 362.010578][T12948] loop5: rw=2049, want=130, limit=112 19:00:48 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cd80"], 0x2}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 19:00:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x212, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 362.185394][T12973] ptrace attach of "/root/syz-executor.2"[12969] was attempted by "/root/syz-executor.2"[12973] [ 362.225954][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.011041][ C0] net_ratelimit: 22 callbacks suppressed [ 363.011049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.023413][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 363.571068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 363.577270][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 364.131085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 364.137163][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) sendto$isdn(r1, &(0x7f0000000440)=ANY=[], 0x0, 0x0, &(0x7f00000002c0)={0x22, 0x53b5, 0x66ab, 0xbf1}, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x1}}) 19:00:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r0, r3, 0x0) 19:00:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x72010000, 0x700000000000000}, @random="d6de8e219d55", [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) 19:00:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@isdn, 0x80) [ 364.291083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 364.297107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 364.303023][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 364.309191][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:50 executing program 0: setresuid(0x0, 0xfffe, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r1, 0x25258f1339f00459, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 19:00:50 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000580)={0x0, 0x20001800, 0x4000, 0x0, 0xffff, 0x1, 0x0, 0x2, 0x843, 0x3}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000002c0), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 19:00:50 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) waitid(0x2, 0xffffffffffffffff, &(0x7f0000000280), 0x40000000, 0x0) [ 364.461938][T12990] attempt to access beyond end of device [ 364.479395][T12990] loop5: rw=2049, want=130, limit=112 19:00:50 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 19:00:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:50 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb1, 0x1}, {{}, 0x0, @in6=@local}}, 0xe8) 19:00:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETS2(r0, 0x8925, 0x0) 19:00:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) write$P9_RLCREATE(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 364.740200][T13027] mkiss: ax0: crc mode is auto. 19:00:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) [ 364.839403][T13027] mkiss: ax0: crc mode is auto. [ 364.873468][T13030] attempt to access beyond end of device [ 364.887696][T13030] loop5: rw=2049, want=130, limit=112 19:00:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x211d49, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa03070501000086dd60b4090000032b0002000000000000000000ffffe0000002ff040000000000000000000000000001890090780009290060b680fa0000000006000000000000000203ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 19:00:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)) 19:00:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:51 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r0 = gettid() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x401004000000016) [ 365.356475][T13065] sp0: Synchronizing with TNC 19:00:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x10000) 19:00:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) write$P9_RLCREATE(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19:00:51 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r0 = gettid() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x401004000000016) 19:00:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) [ 365.713925][ T26] audit: type=1800 audit(1566846051.669:37): pid=13104 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16593 res=0 19:00:51 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:51 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r0 = gettid() r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x401004000000016) [ 366.068191][T13109] sp0: Synchronizing with TNC 19:00:52 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) [ 366.262281][ T26] audit: type=1800 audit(1566846052.209:38): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16593 res=0 19:00:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x80000000003, 0x81000981900}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") close(r0) 19:00:52 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:52 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) [ 366.853731][T13152] sp0: Synchronizing with TNC 19:00:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:52 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:53 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 367.716570][T13194] sp0: Synchronizing with TNC 19:00:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:53 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x100000000000011, 0x3, 0x81) bind(r1, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f000000cc80)='./bus\x00', 0x141042, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0xfd86) ftruncate(r2, 0x87ffd) sendfile(r0, r2, 0x0, 0x800000000024) 19:00:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) [ 368.291029][ C1] net_ratelimit: 18 callbacks suppressed [ 368.291038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.303160][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:54 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 368.451039][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.456949][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 368.462997][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 368.469408][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:00:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:54 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) [ 368.772841][ T26] audit: type=1800 audit(1566846054.729:39): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16562 res=0 19:00:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) [ 368.931053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 368.937521][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:55 executing program 2: setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) 19:00:55 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) [ 369.261056][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 369.267039][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:00:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:55 executing program 2: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', &(0x7f00000000c0)='./file0\x00', r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:55 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:55 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) 19:00:55 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:55 executing program 2: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', &(0x7f00000000c0)='./file0\x00', r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:56 executing program 1: bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:56 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:56 executing program 1: bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:56 executing program 2: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)=0x0) timer_getoverrun(r0) 19:00:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(r0, r1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, 0x0, 0x0) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:56 executing program 1: bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5c0bcfe47bf070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='dots,dots,dots,usefree']) 19:00:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, 0x0, 0x0) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:57 executing program 2: perf_event_open(&(0x7f00000000c0)={0x100000002, 0x70, 0xf70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 19:00:57 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, 0x0, 0x0) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(r0, r1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:57 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10f) r2 = dup2(r0, r1) execve(&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) clone(0x2003102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x3, &(0x7f0000000100)) execve(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) write$P9_RCREATE(r2, 0x0, 0x3ba) 19:00:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(0xffffffffffffffff, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:00:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:00:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:57 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:57 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 19:00:58 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f0000001400)='security.ima\x00', 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 372.422538][T13407] attempt to access beyond end of device [ 372.447261][T13407] loop5: rw=2049, want=130, limit=112 19:00:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(r0, r1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:00:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:00:58 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:00:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 372.756307][T13431] attempt to access beyond end of device [ 372.781390][T13431] loop5: rw=2049, want=130, limit=112 [ 373.411066][ C0] net_ratelimit: 22 callbacks suppressed [ 373.411075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.423373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 373.971076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.976957][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(0xffffffffffffffff, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:00 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 19:01:00 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:01:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:01:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:00 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040), 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:01:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xde, 0x1, {0xb, @sdr={0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9fff]}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r1, 0x1}, {}], 0x2, 0x0, 0x0, 0x0) 19:01:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) [ 374.531468][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 374.537739][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:00 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040), 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:01:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) [ 374.691047][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 374.697436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 374.703699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 374.709833][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:01:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(0xffffffffffffffff, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:02 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040), 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:01:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCSETS2(r0, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:01:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:02 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x7f, 0x0, 0x5, 0xc, 0x4, 0xf1e622a6ca5e9330}) 19:01:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x129) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) 19:01:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:01:02 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) [ 376.876371][T13508] sp0: Synchronizing with TNC [ 376.910953][T13495] attempt to access beyond end of device [ 376.937406][T13495] loop5: rw=2049, want=130, limit=112 19:01:02 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:01:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:01:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 377.283710][T13530] sp0: Synchronizing with TNC [ 378.691058][ C1] net_ratelimit: 18 callbacks suppressed [ 378.691067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 378.703160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 378.851051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 378.856994][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 378.863114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 378.869144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 379.341047][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 379.347784][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 379.661094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 379.667515][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, 0xffffffffffffffff) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:06 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x2, {0x0, @initdev}}, 0x1e) 19:01:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(0xffffffffffffffff, 0x8926, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "000000f9ff06ffffff08e1ffffffffffffff00"}) 19:01:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x129) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) 19:01:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 380.199771][T13564] sp0: Synchronizing with TNC 19:01:06 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, 0x0, 0x0) 19:01:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, 0x0) [ 380.334498][T13561] attempt to access beyond end of device [ 380.364045][T13561] loop5: rw=2049, want=130, limit=112 19:01:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 380.618192][T13588] sp0: Synchronizing with TNC 19:01:06 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, 0x0, 0x0) 19:01:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, 0x0) 19:01:07 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @rand_addr=0x9}}, 0x1e) connect$pptp(r0, 0x0, 0x0) [ 381.179317][T13612] sp0: Synchronizing with TNC [ 383.811045][ C0] net_ratelimit: 22 callbacks suppressed [ 383.811053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 383.823518][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, 0xffffffffffffffff) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x1c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05630440000000000e630c400000000000000000000000f10e630c40"], 0x0, 0x0, 0x0}) 19:01:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETS2(r0, 0x8926, 0x0) 19:01:10 executing program 1: 19:01:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:10 executing program 1: [ 384.145131][T13647] sp0: Synchronizing with TNC 19:01:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:10 executing program 2: 19:01:10 executing program 4: [ 384.373410][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 384.388421][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:10 executing program 2: 19:01:10 executing program 4: perf_event_open(&(0x7f00000000c0)={0x100000002, 0x70, 0xf70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 384.931098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 384.937510][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 385.091074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 385.097529][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 385.103563][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 385.109721][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, 0xffffffffffffffff) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:12 executing program 1: 19:01:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:12 executing program 2: 19:01:12 executing program 4: 19:01:12 executing program 2: 19:01:12 executing program 1: 19:01:12 executing program 4: 19:01:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:12 executing program 2: 19:01:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() dup2(r0, r0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:14 executing program 1: 19:01:14 executing program 4: 19:01:14 executing program 2: 19:01:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:15 executing program 2: 19:01:15 executing program 4: [ 389.091082][ C1] net_ratelimit: 18 callbacks suppressed [ 389.091091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 389.103210][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:15 executing program 1: [ 389.251058][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 389.258294][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 389.264476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 389.270401][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:15 executing program 2: 19:01:15 executing program 4: 19:01:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 389.731059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 389.737025][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 390.051067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 390.056991][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() dup2(r0, r0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:17 executing program 1: 19:01:17 executing program 2: 19:01:17 executing program 4: 19:01:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:17 executing program 1: 19:01:17 executing program 4: 19:01:17 executing program 2: 19:01:17 executing program 1: 19:01:17 executing program 2: 19:01:17 executing program 4: 19:01:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() dup2(r0, r0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:19 executing program 1: 19:01:19 executing program 4: 19:01:19 executing program 2: 19:01:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:19 executing program 1: 19:01:19 executing program 4: 19:01:19 executing program 2: 19:01:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:19 executing program 1: 19:01:19 executing program 2: [ 394.211081][ C0] net_ratelimit: 22 callbacks suppressed [ 394.211090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 394.223031][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 394.771089][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 394.777412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 395.341111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.347356][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 395.501065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.506906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 395.513061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 395.518927][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:21 executing program 4: 19:01:21 executing program 1: 19:01:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:21 executing program 2: 19:01:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:21 executing program 4: 19:01:21 executing program 1: 19:01:21 executing program 2: 19:01:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:22 executing program 2: 19:01:22 executing program 1: 19:01:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:24 executing program 4: 19:01:24 executing program 1: 19:01:24 executing program 2: 19:01:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:25 executing program 4: 19:01:25 executing program 1: 19:01:25 executing program 2: 19:01:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:25 executing program 2: 19:01:25 executing program 4: 19:01:25 executing program 1: [ 399.491074][ C1] net_ratelimit: 18 callbacks suppressed [ 399.491082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 399.502815][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 399.651083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 399.657175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 399.663640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 399.669935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 400.131061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 400.137119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 400.461063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 400.467276][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:28 executing program 2: 19:01:28 executing program 1: 19:01:28 executing program 4: 19:01:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:28 executing program 1: 19:01:28 executing program 4: 19:01:28 executing program 2: 19:01:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:28 executing program 1: 19:01:28 executing program 4: 19:01:28 executing program 2: [ 404.611077][ C0] net_ratelimit: 22 callbacks suppressed [ 404.611086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 404.625044][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:31 executing program 4: 19:01:31 executing program 1: 19:01:31 executing program 2: 19:01:31 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 405.181078][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 405.187694][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:31 executing program 4: 19:01:31 executing program 1: 19:01:31 executing program 2: 19:01:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:31 executing program 1: 19:01:31 executing program 4: 19:01:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf8, 0x0, &(0x7f0000000080)=0x4) [ 405.731091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 405.737430][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 405.891051][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 405.897075][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 405.902956][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 405.908812][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:34 executing program 4: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) getpid() syz_open_dev$evdev(0x0, 0x10000, 0x100) r1 = open(0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_emit_ethernet(0x271, &(0x7f0000000000)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x83a, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0x0, 0x8}}}}}}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, 0x0, 0x20000805) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) sync_file_range(r1, 0x1000, 0x1, 0x171d51b92b27917) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x3, 0x0, 0xc0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2a00000058a9fc33dec77cc929e445f41c4d0948fed78d375c4fe7bf7a1e11781015ec43ea91d30f07d9cf7c0df4"], &(0x7f0000000100)=0x32) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000035c0)={0x0, @rand_addr, @multicast2}, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@null=' \x00', 0x8, 'netdevsim0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) clock_gettime(0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000280)) ioctl$TCSETAF(r1, 0x5408, 0x0) unshare(0x40000000) 19:01:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:34 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, 0x0) 19:01:34 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, {[@rr={0x7, 0xb, 0x5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}, @igmp={0x0, 0x0, 0x0, @local}}}}}, 0x0) 19:01:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:34 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0xa001, 0x8, 0x40, 0x40fe, 0x6, 0x2, 0xffffffff, 0x5, 0x7ff, 0x0, 0x8001, 0x1ff, 0x0, 0x8, 0x5, 0x2, 0x3, 0x2, 0x0, 0x7, 0x1000, 0xff, 0x1, 0x7ff, 0x7487, 0x0, 0x9, 0xffff, 0x0, 0xb61f, 0x0, 0xd3, 0x0, @perf_config_ext={0x0, 0xffffffffffffffe0}, 0x2000, 0xff, 0x60000, 0x7, 0x71fa, 0x1, 0x7a88}, r0, 0x4, 0xffffffffffffffff, 0x2) 19:01:34 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r1+30000000}}, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) 19:01:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:34 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x13) read$FUSE(r0, &(0x7f0000001340), 0x1000) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "b4b09f", "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"}}, 0x110) [ 409.108710][T13926] IPVS: ftp: loaded support on port[0] = 21 19:01:35 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ptrace(0x10, r0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 19:01:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 409.397620][T13968] IPVS: ftp: loaded support on port[0] = 21 19:01:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 409.592262][T13969] attempt to access beyond end of device [ 409.598248][T13969] loop5: rw=2049, want=130, limit=112 [ 409.891090][ C1] net_ratelimit: 18 callbacks suppressed [ 409.891098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 409.903062][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 410.051059][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 410.056934][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 410.063153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 410.069267][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 410.531062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 410.537267][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 410.851066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 410.856906][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000180)="ff", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:01:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:37 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) epoll_create(0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:01:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\xfe\xff\xff\a\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000001c0)=""/98, &(0x7f0000000040)=0x62) 19:01:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf9, 0x0, &(0x7f0000000080)=0x4) 19:01:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 415.011086][ C0] net_ratelimit: 22 callbacks suppressed [ 415.011095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 415.022691][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x7c070b9d7af2e25d, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) keyctl$unlink(0x9, 0x0, 0x0) clone(0x80a102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f616420656372797074667320747275737465643a757365723a203030303030303030303030303030305ecfe2b879f244"], 0xfffffffffffffe8a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 19:01:41 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, 0x10) 19:01:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:41 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x85c22563803682f9, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x400000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='yam0\x00'}) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000000)={0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0xd0, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x10001, 0x0, 0x96b, 0x0, 0xdea}) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r1, 0x0, 0xfffffffffffffff4) splice(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) unshare(0x60000000) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = accept4(r0, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x0) write$binfmt_misc(r2, &(0x7f0000000340)={'syz1', "51c2cdbb389a530ed3994216ca69710f33394436d9cd6621f43463e2e8f9008b124c8b1f1ca0797ccb1975e52a60066a778f80fbf964a63b8aa08ef752af997abb77c1fc5d07d7e2a4d242be401dcb58"}, 0x54) 19:01:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 415.571066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 415.577080][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 415.606730][T14053] encrypted_key: hex blob is missing 19:01:41 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fsync(r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r1, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 19:01:41 executing program 1: 19:01:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:41 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, &(0x7f0000000080)=0x54) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0x300) add_key(&(0x7f0000000180)='keyring\x00', 0x0, &(0x7f0000000200)="8e396e276c2227b3e686908c996a6c19fb1c", 0x12, 0xfffffffffffffff9) [ 415.899505][T14055] IPVS: ftp: loaded support on port[0] = 21 19:01:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 416.131636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.138175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 416.222123][T14082] IPVS: ftp: loaded support on port[0] = 21 [ 416.291080][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.297040][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 416.303014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 416.309000][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 416.515174][T14088] IPVS: ftp: loaded support on port[0] = 21 [ 417.133313][T14082] IPVS: ftp: loaded support on port[0] = 21 [ 420.291074][ C1] net_ratelimit: 18 callbacks suppressed [ 420.291083][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.302879][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 420.451065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.457149][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 420.463110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.469124][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 420.931080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 420.937200][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 421.251054][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 421.256903][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:47 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x760000000000) [ 421.743180][T14109] attempt to access beyond end of device [ 421.769371][T14109] loop5: rw=2049, want=130, limit=112 [ 421.820337][ T26] audit: type=1326 audit(1566846107.769:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x50000 [ 421.867853][ T26] audit: type=1326 audit(1566846107.799:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459879 code=0x50000 [ 421.912733][ T26] audit: type=1326 audit(1566846107.799:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x50000 [ 421.947442][ T26] audit: type=1326 audit(1566846107.799:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x459879 code=0x50000 [ 421.972403][ T26] audit: type=1326 audit(1566846107.799:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x50000 [ 421.995643][ T26] audit: type=1326 audit(1566846107.799:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459879 code=0x50000 [ 422.018964][ T26] audit: type=1326 audit(1566846107.799:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459879 code=0x50000 [ 422.042399][ T26] audit: type=1326 audit(1566846107.799:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459879 code=0x50000 [ 422.086445][ T26] audit: type=1326 audit(1566846107.799:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459879 code=0x50000 [ 422.109700][ T26] audit: type=1326 audit(1566846107.799:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14104 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x459879 code=0x50000 19:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000001240)=""/4096) 19:01:48 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fsync(r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r1, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 19:01:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f0000000080)=0x4) 19:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055effcfe47bf070") r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x21, 0x0, 0x0) [ 422.664692][T14126] attempt to access beyond end of device [ 422.682148][T14126] loop5: rw=2049, want=130, limit=112 19:01:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:48 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 19:01:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x760000000000) [ 425.411033][ C0] net_ratelimit: 22 callbacks suppressed [ 425.411042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 425.422934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 425.971094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 425.976932][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 19:01:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x40122000000003, 0x11) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000001640)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000001c0)=r0, 0x4) sendmsg(r0, &(0x7f0000002400)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x80, 0x0}, 0x0) 19:01:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x760000000000) 19:01:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:52 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c, 0x0, 0x4c51a1c6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fsync(r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r1, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 426.204448][T14171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:01:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f00000000c0)) 19:01:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x150) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x801c581f, 0x0) [ 426.430292][T14169] attempt to access beyond end of device [ 426.463893][T14169] loop5: rw=2049, want=130, limit=112 [ 426.531093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.537033][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:52 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:52 executing program 4: socketpair$unix(0x1, 0x97d87268f148058d, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0xfffffffffffff007) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) lsetxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)='caif0\x00', 0x6, 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000c40)="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"/393) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 19:01:52 executing program 1: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x4050) fstat(r1, 0x0) [ 426.691044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.698015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 426.704377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.711339][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:01:52 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmod(r0, 0x0) 19:01:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x401004000000016) 19:01:55 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 19:01:55 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 19:01:55 executing program 1: perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) add_key$user(0x0, 0x0, &(0x7f0000000c40)="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", 0x6d8, 0xfffffffffffffffc) 19:01:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000700), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 19:01:55 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 19:01:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:55 executing program 4: msgsnd(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="01"], 0x1, 0x0) msgrcv(0x0, &(0x7f00000011c0)={0x0, ""/115}, 0x1ce, 0x0, 0x0) [ 429.584342][T14226] attempt to access beyond end of device [ 429.593410][T14226] loop5: rw=2049, want=130, limit=112 19:01:55 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) waitid(0x2, 0xffffffffffffffff, 0x0, 0x40000000, 0x0) 19:01:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000700), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 429.992405][T14248] attempt to access beyond end of device [ 430.011361][T14248] loop5: rw=2049, want=130, limit=112 [ 430.691069][ C1] net_ratelimit: 18 callbacks suppressed [ 430.691078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.703090][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 430.851055][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.857182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 430.863656][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.869433][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 431.331061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 431.337012][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 431.651099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 431.657473][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:01:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x401004000000016) 19:01:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000011005374f83d6480ccb90300060000000000000000b73800000000000000000000000000200002000000000000000000000000004000000000000000000000ffff0000000000000000001a0000000200000003000000000000040072ffe11c82451e7200"/120], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19:01:58 executing program 2: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x1d}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 19:01:58 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:01:58 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x2000000006, 0x0, 0x0, 0x50000}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 19:01:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 432.533669][T14270] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/4' not defined. 19:01:58 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) 19:01:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:01:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000011005374f83d6480ccb90300060000000000000000b73800000000000000000000000000200002000000000000000000000000004000000000000000000000ffff0000000000000000001a0000000200000003000000000000040072ffe11c82451e7200"/120], 0x78) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19:01:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x200000000008, 0x3, 0x3}, 0x2a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f00000000c0)=""/92}, 0x15) 19:01:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 19:01:58 executing program 4: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x20) fstat(r1, 0x0) 19:02:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x401004000000016) 19:02:01 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffb4, &(0x7f0000000180), 0x361}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00'}) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 19:02:01 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 19:02:01 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = dup(r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x36f}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x18f) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) 19:02:01 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(r0, r1, 0x0) tkill(0x0, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 435.811040][ C0] net_ratelimit: 22 callbacks suppressed [ 435.811048][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 435.823195][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:01 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:02:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) r1 = socket(0x10, 0x80000, 0xe969) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x259, &(0x7f0000000180)=0x2) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) [ 435.890002][T14312] attempt to access beyond end of device [ 435.900578][T14312] loop5: rw=2049, want=130, limit=112 19:02:01 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:02 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 19:02:02 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) dup2(r0, r1) 19:02:02 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) [ 436.371095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 436.377129][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 436.931077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 436.937089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 437.091038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 437.097175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 437.103134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 437.108963][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:02:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401004000000016) 19:02:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x80fe) 19:02:04 executing program 2: syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000001c40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1}) unshare(0x40600) ftruncate(r1, 0x39) timer_create(0x0, 0x0, &(0x7f0000000040)) dup2(r0, r1) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x400c000) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x0]}) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x7d, 0xfffe}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:02:04 executing program 4: mmap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 19:02:04 executing program 5: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000280)={0x2000000000000009, 0xfffffffffffffff8, 0x29854f7b, 0x10000001, 0x1e, 0x400000}) r2 = socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(r2, 0x0, &(0x7f00000000c0)="15bf6234488dd25d726070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0xc9f, @mcast1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000003c0)={0x800000000002, 0x8005}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xc8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in6=@local}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xfffffffffffffeb5) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r4, 0x7, 0x1, 0x7) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={@dev={0xfe, 0x80, [], 0xb}, 0x81}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=0x0) r7 = fcntl$getown(r2, 0x9) getpgrp(r7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000200)=0xc) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000340), &(0x7f00000002c0)=0x4) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4) r9 = getegid() setfsgid(r9) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x1f, r6, 0x0, r5, 0x0, 0x20}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 19:02:05 executing program 2: syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0xc0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000001c40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1}) unshare(0x40600) ftruncate(r1, 0x39) timer_create(0x0, 0x0, &(0x7f0000000040)) dup2(r0, r1) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x400c000) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x0]}) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x7d, 0xfffe}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:02:05 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x0, 0x0, 0x5, 0xc}) 19:02:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x14) 19:02:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xde, 0x1, {0xb, @sdr={0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9fff]}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) 19:02:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:05 executing program 5: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) [ 440.016011][T14409] attempt to access beyond end of device [ 440.022591][T14409] loop5: rw=2049, want=130, limit=112 [ 441.091072][ C1] net_ratelimit: 18 callbacks suppressed [ 441.091082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 441.103411][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 441.251034][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 441.257616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 441.263884][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 441.269919][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:02:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401004000000016) 19:02:07 executing program 4: 19:02:07 executing program 1: 19:02:07 executing program 5: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:07 executing program 2: 19:02:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r1) dup3(0xffffffffffffffff, r1, 0x0) tkill(r0, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:07 executing program 2: 19:02:07 executing program 4: 19:02:07 executing program 1: [ 441.731041][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 441.737239][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:07 executing program 4: 19:02:07 executing program 2: 19:02:07 executing program 1: [ 442.051036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 442.057416][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() r1 = dup2(r0, r0) write$FUSE_BMAP(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401004000000016) 19:02:09 executing program 4: 19:02:09 executing program 2: 19:02:09 executing program 1: 19:02:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:09 executing program 1: 19:02:09 executing program 4: 19:02:09 executing program 2: 19:02:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:10 executing program 2: 19:02:10 executing program 1: 19:02:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) 19:02:12 executing program 4: 19:02:12 executing program 2: 19:02:12 executing program 1: 19:02:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:12 executing program 1: 19:02:12 executing program 2: 19:02:12 executing program 4: 19:02:12 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 446.211050][ C0] net_ratelimit: 22 callbacks suppressed [ 446.211059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 446.222616][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:12 executing program 1: 19:02:12 executing program 4: [ 446.395587][T14484] attempt to access beyond end of device [ 446.433169][T14484] loop5: rw=2049, want=130, limit=112 [ 446.771065][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 446.776900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 447.331093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 447.337077][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 447.491025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 447.497419][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 447.503962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 447.510242][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:02:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) 19:02:14 executing program 2: 19:02:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) gettid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r2, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:14 executing program 1: 19:02:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:14 executing program 4: 19:02:14 executing program 1: 19:02:14 executing program 4: 19:02:14 executing program 2: 19:02:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:14 executing program 1: 19:02:14 executing program 4: [ 448.608003][T14520] attempt to access beyond end of device [ 448.641169][T14520] loop5: rw=2049, want=130, limit=112 19:02:16 executing program 4: 19:02:16 executing program 2: 19:02:16 executing program 1: 19:02:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) write$FUSE_BMAP(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x0) 19:02:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:16 executing program 4: 19:02:16 executing program 1: 19:02:16 executing program 2: 19:02:16 executing program 4: 19:02:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:16 executing program 2: [ 450.646444][T14552] attempt to access beyond end of device [ 450.677921][T14552] loop5: rw=2049, want=130, limit=112 19:02:16 executing program 4: 19:02:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:16 executing program 1: 19:02:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 451.089437][T14581] attempt to access beyond end of device [ 451.096264][T14581] loop5: rw=2049, want=130, limit=112 [ 451.491065][ C1] net_ratelimit: 18 callbacks suppressed [ 451.491074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.504126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 451.651061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.657141][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 451.663293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.669135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 452.131047][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 452.137084][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 452.461071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 452.467144][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:18 executing program 4: 19:02:18 executing program 2: 19:02:18 executing program 1: 19:02:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:18 executing program 3: 19:02:18 executing program 1: 19:02:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x80ffffff}) 19:02:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x45, 0x0) r1 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000840)=0x0) socket$inet(0x2, 0x800, 0x1000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/125, 0x7d}, {&(0x7f0000000200)=""/251, 0xfb}], 0x2, 0x0) getpgid(r2) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0xe, 0x0, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x0, 0x73d9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1f}, 0x0, 0x0, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 19:02:18 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000fc0)) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f0000000540)=""/219, 0xdb}], 0x6}}], 0x48}, 0x0) 19:02:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000480)=[@register_looper={0x40406300}], 0x0, 0x0, 0x0}) 19:02:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000080)=0x4) 19:02:19 executing program 4: 19:02:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:19 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000fc0)) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f0000000540)=""/219, 0xdb}], 0x6}}], 0x48}, 0x0) 19:02:19 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x1, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40fe, 0x6, 0x0, 0xffffffff, 0x0, 0x7ff, 0x0, 0x0, 0x1ff, 0x80000000, 0x0, 0x5, 0x2, 0x0, 0x2, 0x401, 0x0, 0x1000, 0xff, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb61f, 0x0, 0xd3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x71fa, 0x0, 0x7a88}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 19:02:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xfb, 0x0, &(0x7f0000000080)=0x4) 19:02:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) 19:02:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf3, 0x0, &(0x7f0000000080)=0x4) 19:02:19 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200), 0x2) 19:02:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xfc, 0x0, &(0x7f0000000080)=0x4) 19:02:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007540)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@setlink={0x24, 0x13, 0x233, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}}, 0x0) 19:02:20 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 19:02:20 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, 0x10) 19:02:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055effcfe47bf070") r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xd, 0x0, 0x0) 19:02:20 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/11, 0xd7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) clone(0xf102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 19:02:20 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x800000002, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCLINUX3(r0, 0x541c, 0x0) 19:02:20 executing program 1: 19:02:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:20 executing program 2: 19:02:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000005e000700"/20, @ANYRES32, @ANYBLOB='\x00'/12], 0x24}}, 0x0) 19:02:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr="fb2e8c1e932e2ec137fee1c16ea41732"}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=[@hoplimit_2292={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0xffffffffffffffc1}}], 0x30}}], 0x1, 0x0) 19:02:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xfe, 0x0, &(0x7f0000000080)=0x4) 19:02:21 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) unlink(&(0x7f0000000300)='./bus\x00') clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() link(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='./bus\x00') ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x22) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) 19:02:21 executing program 4: 19:02:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:21 executing program 4: 19:02:21 executing program 3: 19:02:21 executing program 1: [ 455.603233][T14750] ptrace attach of "/root/syz-executor.2"[14748] was attempted by "/root/syz-executor.2"[14750] 19:02:21 executing program 2: 19:02:21 executing program 4: 19:02:21 executing program 3: 19:02:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:22 executing program 1: 19:02:22 executing program 3: 19:02:22 executing program 4: 19:02:22 executing program 2: 19:02:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:22 executing program 4: 19:02:22 executing program 3: 19:02:22 executing program 1: 19:02:22 executing program 2: 19:02:22 executing program 4: [ 456.611093][ C0] net_ratelimit: 22 callbacks suppressed [ 456.611102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 456.622933][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:22 executing program 1: [ 457.171192][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 457.177453][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:23 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:23 executing program 4: 19:02:23 executing program 3: 19:02:23 executing program 1: 19:02:23 executing program 2: 19:02:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:23 executing program 2: 19:02:23 executing program 4: 19:02:23 executing program 3: 19:02:23 executing program 1: 19:02:23 executing program 2: 19:02:23 executing program 2: [ 457.731487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.738280][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.891091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.897708][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.904217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.910503][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:02:24 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:24 executing program 4: 19:02:24 executing program 1: 19:02:24 executing program 3: 19:02:24 executing program 2: 19:02:24 executing program 1: 19:02:24 executing program 3: 19:02:24 executing program 4: 19:02:24 executing program 2: 19:02:24 executing program 1: 19:02:24 executing program 2: 19:02:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:25 executing program 3: 19:02:25 executing program 1: 19:02:25 executing program 4: 19:02:25 executing program 2: 19:02:25 executing program 4: 19:02:25 executing program 1: 19:02:25 executing program 2: 19:02:25 executing program 3: [ 459.405099][T14866] FAT-fs (loop5): bogus number of reserved sectors 19:02:25 executing program 2: 19:02:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 459.481165][T14866] FAT-fs (loop5): Can't find a valid FAT filesystem 19:02:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:25 executing program 4: 19:02:25 executing program 1: 19:02:25 executing program 3: 19:02:25 executing program 2: 19:02:25 executing program 1: 19:02:25 executing program 3: 19:02:25 executing program 2: 19:02:25 executing program 4: 19:02:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000), &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 459.894269][T14890] FAT-fs (loop5): bogus number of reserved sectors 19:02:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe8, 0x0, &(0x7f0000000080)=0x4) 19:02:25 executing program 1: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) [ 459.990216][T14890] FAT-fs (loop5): Can't find a valid FAT filesystem 19:02:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:26 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0xffffffb5, 0x1) 19:02:26 executing program 3: 19:02:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xce, 0x0, &(0x7f0000000080)=0x4) 19:02:26 executing program 1: 19:02:26 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x79c4}) close(0xffffffffffffffff) 19:02:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf5, 0x0, &(0x7f0000000080)=0x4) 19:02:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000040), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f00000004c0)="ff", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = dup2(r1, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) exit(0x0) 19:02:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\t\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) [ 460.834810][T14926] FAT-fs (loop5): bogus number of reserved sectors [ 460.876181][T14926] FAT-fs (loop5): Can't find a valid FAT filesystem [ 461.891106][ C1] net_ratelimit: 18 callbacks suppressed [ 461.891114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.903654][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 462.051148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 462.057404][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 462.064004][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 462.069957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 462.541123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 462.547348][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 462.851128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 462.857318][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000), &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000047c0)="11dca50d5c0bcfe47bf070") r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc3, 0x0, &(0x7f0000000080)=0x4) 19:02:28 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 19:02:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000003700)=ANY=[@ANYBLOB="000000000006000000000040"]) [ 463.138156][T14965] FAT-fs (loop5): bogus number of reserved sectors 19:02:29 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_thread_area(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 19:02:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000005c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'system'}}]}) [ 463.203767][T14965] FAT-fs (loop5): Can't find a valid FAT filesystem 19:02:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x4, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0xfffffffffffffcdb, 0x10, &(0x7f0000000140)}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) close(r2) 19:02:29 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:29 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000002c0)="0a0008000012a41d88b070") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(r1, &(0x7f0000000080)='1', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)=0x4, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0xed5e0000, 0x0, 0x0, 0x20000fff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f623448") ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100000002091, r2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0xad, {{0x2, 0x4e21}}}, 0x88) socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0xfffffe8f) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x300000a, 0x8013, r2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) 19:02:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000), &(0x7f0000044000)) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:32 executing program 1: fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3f, 0xc0000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000100)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000080), 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f00000000c0), 0x4) request_key(0x0, &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='selinuxmd5sum\x00', 0xfffffffffffffffb) close(r0) 19:02:32 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1e80730000005047f3240000dff3ee3ed50d3181ac4600049b64567e272355001c0000204eb681d5436abebf396d6ae591f18a7423fdffffff65d65759f300001ab7332d0ef55ec200808c43937aad9a859e63e9b1a3abe483a608dcb572c53e083fc93973fa0896b5a7573fdea7f15063b982486ac3ef57d054d817c9ae9bcedcae658ab34fd6bedd723b2504a29a920388ef91a322df7f275473754169994053530382b28fba9c966bdcd732d4fce2993e59af6c8600e34ec201ba8a33d554b4c3094126813a889c78fbd484404283ecbd746ac1f269d7b406dc14a24c8af0bee825ef4179f5915abb399afd951cd370e89ac8aec191756d087f3e4f64b03c84029c7633ff3d9d389da9991af92bc54bb2963e7ad05fb3858fc3d720549625d36ce72a7ec6fc33baa27f5ef569023543606a102ae8a89654d2bcc82e55aa75b5827fd4edbd07cec200000000"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000300)) 19:02:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_thread_area(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 466.306717][T15008] FAT-fs (loop5): bogus number of reserved sectors [ 466.317844][T15008] FAT-fs (loop5): Can't find a valid FAT filesystem 19:02:32 executing program 2: mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x2000203a, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000007c0)=""/246) epoll_create(0x3) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) write$ppp(r0, 0x0, 0x0) pipe(&(0x7f0000000680)) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200), 0x0) 19:02:32 executing program 3: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:32 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 19:02:32 executing program 3: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:32 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 19:02:32 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) [ 467.011731][ C0] net_ratelimit: 22 callbacks suppressed [ 467.011792][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 467.025069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 467.581195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 467.587652][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 468.131095][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 468.137673][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 468.291031][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 468.297364][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 468.303308][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 468.309155][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:02:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:35 executing program 3: ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_thread_area(0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000001ffc382ebd5e5bc53ab81262c0e6657c9145d1296714af248d32825ef8668e8af31c3e8132551000381668850a81eeb9a2f641de9e0242cef3fe27cf3d66e7e95c0ad3e1ef88e12f7a1d12d335f13fb31f86c7f35eba437b058cc620229d7839683afcd80a204fc04a0242b49ff12289013cbf84707dc9b19b1c7aa64501f2ec145d5db86598e85d7ee97c8cc1a2d7bc47c3bb8c96e466d3ba2aedf6639bc5228b0e1b3140c6c0f8cd6dceece8dc3ff9c7927d6f93f4b522d5964a01bbd544beba6b2bcdceb6b7fb4f5772f84e12f34e7098cc8accbc00"/236], 0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 19:02:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) 19:02:35 executing program 1: r0 = socket(0x420000000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) 19:02:35 executing program 1: r0 = socket(0x420000000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) 19:02:35 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) [ 469.492880][T15055] FAT-fs (loop5): bogus number of reserved sectors [ 469.600685][T15055] FAT-fs (loop5): Can't find a valid FAT filesystem 19:02:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:35 executing program 1: r0 = socket(0x420000000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) 19:02:35 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:36 executing program 1: r0 = socket(0x420000000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) [ 470.078017][T15077] FAT-fs (loop5): bogus number of reserved sectors [ 470.134396][T15077] FAT-fs (loop5): Can't find a valid FAT filesystem [ 472.291562][ C1] net_ratelimit: 18 callbacks suppressed [ 472.291608][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 472.304135][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:02:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='nodevGPL#\x00', 0x0, r2) dup3(r0, r2, 0x0) tkill(r1, 0x1002000000016) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 19:02:38 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={'eth0\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xc8\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x17\b\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00S\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_/0\xef\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb4\x1e\xb4s\x85\x94\xaf\xef\x00'}) 19:02:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) gettid() r2 = socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f00000004c0)=0x1a) socket$inet_sctp(0x2, 0x1, 0x84) unlinkat(r3, &(0x7f0000000240)='./file0\x00', 0xcccd0b7e5f97b7df) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14d) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00634040bccc5c594851a685e4512873c75e462ddeecb8683aa9edf16157d72b7132b871b3fe0c00"/55], 0x0, 0x0, 0x0}) 19:02:38 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) [ 472.451025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 472.457280][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 472.463355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 472.469431][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:02:38 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0xcb55c8342f395741, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init1(0x80000) dup(r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000340)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) statfs(0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x4) write$P9_RLOCK(r0, &(0x7f0000000400)={0x8, 0x35, 0x2}, 0x8) 19:02:38 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, 0x0) 19:02:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) 19:02:38 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) [ 472.548244][T15096] FAT-fs (loop5): bogus number of reserved sectors [ 472.578525][T15096] FAT-fs (loop5): Can't find a valid FAT filesystem 19:02:38 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, 0x0) 19:02:38 executing program 1: write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) [ 472.931054][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 472.937017][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:02:39 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e1, 0x0) 19:02:39 executing program 1: r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) [ 473.251781][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 473.258259][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 473.561351][T15111] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 473.608869][T15111] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 473.625884][T15111] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 473.655171][T15111] EXT4-fs: failed to create workqueue [ 473.661062][T15111] EXT4-fs (loop4): mount failed [ 473.666550][T15111] ------------[ cut here ]------------ [ 473.672136][T15111] ODEBUG: free active (active state 0) object type: percpu_counter hint: 0x0 [ 473.681599][T15111] WARNING: CPU: 0 PID: 15111 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 473.691597][T15111] Kernel panic - not syncing: panic_on_warn set ... [ 473.698582][T15111] CPU: 0 PID: 15111 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190826 #73 [ 473.708067][T15111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.718407][T15111] Call Trace: [ 473.721891][T15111] dump_stack+0x172/0x1f0 [ 473.726690][T15111] ? debug_print_object+0x90/0x250 [ 473.731990][T15111] panic+0x2dc/0x755 [ 473.735978][T15111] ? add_taint.cold+0x16/0x16 [ 473.740674][T15111] ? __kasan_check_write+0x14/0x20 [ 473.745791][T15111] ? __warn.cold+0x14/0x3c [ 473.750335][T15111] ? debug_print_object+0x168/0x250 [ 473.755627][T15111] __warn.cold+0x2f/0x3c [ 473.759970][T15111] ? debug_print_object+0x168/0x250 [ 473.765471][T15111] report_bug+0x289/0x300 [ 473.769997][T15111] do_error_trap+0x11b/0x200 [ 473.775145][T15111] do_invalid_op+0x37/0x50 [ 473.779675][T15111] ? debug_print_object+0x168/0x250 [ 473.785388][T15111] invalid_op+0x23/0x30 [ 473.790187][T15111] RIP: 0010:debug_print_object+0x168/0x250 [ 473.796005][T15111] Code: dd 60 6c e6 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 60 6c e6 87 48 c7 c7 c0 61 e6 87 e8 20 31 01 fe <0f> 0b 83 05 f3 67 83 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 473.815964][T15111] RSP: 0018:ffff888054f5f938 EFLAGS: 00010086 [ 473.822484][T15111] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 473.830956][T15111] RDX: 0000000000040000 RSI: ffffffff815bd606 RDI: ffffed100a9ebf19 [ 473.839400][T15111] RBP: ffff888054f5f978 R08: ffff88805ec38400 R09: ffffed1015d04109 [ 473.847803][T15111] R10: ffffed1015d04108 R11: ffff8880ae820847 R12: 0000000000000001 [ 473.856126][T15111] R13: ffffffff8935e800 R14: 0000000000000000 R15: ffff88808e601c08 [ 473.864362][T15111] ? vprintk_func+0x86/0x189 [ 473.868986][T15111] ? debug_print_object+0x168/0x250 [ 473.874304][T15111] debug_check_no_obj_freed+0x2d4/0x43f [ 473.880222][T15111] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 473.886133][T15111] kfree+0xf8/0x2c0 [ 473.890327][T15111] ext4_fill_super+0x8cb/0xcc80 [ 473.895436][T15111] ? ext4_calculate_overhead+0x1250/0x1250 [ 473.901605][T15111] ? vsprintf+0x40/0x40 [ 473.905875][T15111] ? wait_for_completion+0x440/0x440 [ 473.911475][T15111] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 473.917494][T15111] ? set_blocksize+0x2bf/0x340 [ 473.922542][T15111] mount_bdev+0x304/0x3c0 [ 473.926899][T15111] ? mount_bdev+0x304/0x3c0 [ 473.931679][T15111] ? ext4_calculate_overhead+0x1250/0x1250 [ 473.937767][T15111] ext4_mount+0x35/0x40 [ 473.942120][T15111] ? ext4_nfs_get_inode+0xe0/0xe0 [ 473.947412][T15111] legacy_get_tree+0x113/0x220 [ 473.952193][T15111] ? ns_capable_common+0x93/0x100 [ 473.957554][T15111] vfs_get_tree+0x8f/0x380 [ 473.962253][T15111] do_mount+0x13b3/0x1c30 [ 473.966962][T15111] ? copy_mount_string+0x40/0x40 [ 473.971928][T15111] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.978586][T15111] ? _copy_from_user+0x12c/0x1a0 [ 473.983791][T15111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.990489][T15111] ? copy_mount_options+0x2e8/0x3f0 [ 473.995795][T15111] ksys_mount+0xdb/0x150 [ 474.000151][T15111] __x64_sys_mount+0xbe/0x150 [ 474.005033][T15111] do_syscall_64+0xfa/0x760 [ 474.010132][T15111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.016498][T15111] RIP: 0033:0x45c2ca [ 474.020681][T15111] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 474.041453][T15111] RSP: 002b:00007fc7d8073a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 474.050234][T15111] RAX: ffffffffffffffda RBX: 00007fc7d8073b40 RCX: 000000000045c2ca [ 474.058490][T15111] RDX: 00007fc7d8073ae0 RSI: 0000000020000000 RDI: 00007fc7d8073b00 [ 474.066985][T15111] RBP: 0000000000001000 R08: 00007fc7d8073b40 R09: 00007fc7d8073ae0 [ 474.075257][T15111] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000004 [ 474.083331][T15111] R13: 00000000004c89d6 R14: 00000000004df8f8 R15: 00000000ffffffff [ 474.094762][T15111] Kernel Offset: disabled [ 474.099363][T15111] Rebooting in 86400 seconds..