sr_slave_0 03:36:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x20000254}}, 0x0) 03:36:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a0000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xb, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/144, 0x90}, {0x0}], 0x2}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r2, 0x0) 03:36:34 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) dup(r0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00809) 03:36:34 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4"], 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2482.619233][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:34 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4"], 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:36:35 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2482.719300][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:35 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4"], 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2482.859976][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:35 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:35 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb9"], 0x59) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2483.905167][ C1] net_ratelimit: 25 callbacks suppressed [ 2483.905194][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.910831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.916580][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.922262][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.927949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.939352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.945075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.950800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2483.956681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2483.962405][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2490.145096][ C0] net_ratelimit: 24 callbacks suppressed [ 2490.145105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2490.145122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2490.150855][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2490.156595][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2490.162320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2490.179453][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2490.185213][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2490.190945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2490.196671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2490.202387][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:36:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x7ffff000}}, 0x0) 03:36:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:43 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb9"], 0x59) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:36:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a3000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00836) shutdown(r0, 0x0) shutdown(r1, 0x0) 03:36:43 executing program 2: poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x4e, 0x0, 0x0, 0x800e004de) r1 = dup(r0) setsockopt$inet_group_source_req(r0, 0x0, 0x53, &(0x7f0000000140)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x118) recvfrom$inet(r0, 0x0, 0x1000001ab, 0x0, 0x0, 0x800e004e1) shutdown(r1, 0x0) [ 2490.932769][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:43 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb9"], 0x59) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2490.997368][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/123, 0x7b}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000000)=""/74, 0x4a}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000080)=""/81, 0x51}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:36:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xe, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:43 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c"], 0x5f) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:36:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/59, 0x3b}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/117, 0x75}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x1000000000000126}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x10000000005, 0x84) readv(r7, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {0x0}], 0x2) shutdown(r6, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 2491.176047][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2491.264638][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2496.385104][ C0] net_ratelimit: 26 callbacks suppressed [ 2496.385115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.385122][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.402241][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.408066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.413773][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.419519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.425252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.430969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.436745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.442484][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:36:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x2}, 0x0) 03:36:49 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c"], 0x5f) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:36:49 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a5000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xf, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/170, 0xaa}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}], 0x1}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/48, 0x30}, {0x0}], 0x2) shutdown(r3, 0x0) r5 = dup(r1) shutdown(r5, 0x0) 03:36:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549) r2 = dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00551) shutdown(r2, 0x0) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/145, 0x91}], 0x1}, 0x0) shutdown(r3, 0x0) [ 2497.171286][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:49 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c"], 0x5f) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:36:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2497.298788][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:49 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a6000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:49 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5e"], 0x62) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2497.374073][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000340)={0x0, 0x120, &(0x7f0000001880)=[{&(0x7f0000000280)=""/152, 0x25}], 0x2f4, 0x0, 0xfffffca9}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00551) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001480), 0x1000000000000120) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e00559) shutdown(r4, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000180)=""/72, 0x48}, {0x0}], 0x2) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 2497.538446][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2502.625084][ C1] net_ratelimit: 24 callbacks suppressed [ 2502.625115][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2502.630743][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2502.630777][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2502.636512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2502.653584][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2502.659365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2502.665121][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2502.670840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2502.676582][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2502.682300][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:36:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x3}, 0x0) 03:36:55 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5e"], 0x62) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:36:55 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a7000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4c, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:55 executing program 0: poll(&(0x7f0000000000), 0x200000000000004e, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfe05, 0x0, 0x0, 0x800e00515) setsockopt$inet_group_source_req(r0, 0x0, 0x52, &(0x7f0000000100)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x118) recvfrom$inet(r0, 0x0, 0xfffffd64, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) 03:36:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/102, 0x66}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) shutdown(r2, 0x0) 03:36:55 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5e"], 0x62) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2503.522310][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:55 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a8000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:36:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x60, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:36:55 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041"], 0x64) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:36:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/50, 0x32}, {0x0}], 0x2}, 0x3e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/248, 0xf8}, {0x0}, {0x0}], 0x3}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) recvfrom$inet(r2, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) shutdown(r2, 0x0) [ 2503.710389][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:56 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041"], 0x64) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2508.865115][ C1] net_ratelimit: 24 callbacks suppressed [ 2508.865124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2508.865143][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2508.870895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2508.876665][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2508.894011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2508.899823][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2508.905591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2508.911345][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2508.917114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2508.922946][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:37:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x4}, 0x0) 03:37:05 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3a9000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041"], 0x64) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/253, 0xfd}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1}, 0x2) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x2, 0x0, 0x800e00515) shutdown(r0, 0x0) semop(0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 03:37:05 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x68, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:05 executing program 0: poll(&(0x7f0000000100)=[{}], 0x1, 0x80000000004e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x1}, &(0x7f00000000c0), 0x8) shutdown(r0, 0x0) [ 2512.885794][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2512.960490][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:05 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3aa000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:05 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6c, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r1, r1) accept4(r2, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x17, 0x0, 0x0, 0x800e003be) shutdown(r0, 0x0) [ 2513.138508][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2513.216881][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2515.105112][ C1] net_ratelimit: 25 callbacks suppressed [ 2515.105133][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2515.110849][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2515.116572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2515.122248][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2515.127971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2515.139342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2515.145059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2515.150792][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2515.156536][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2515.162262][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:37:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x8}, 0x0) 03:37:13 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ab000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:13 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:13 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x74, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:13 executing program 2: r0 = socket(0x1c, 0x3, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2000}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x25f, 0x0, 0x0, 0x800e003b0) poll(0x0, 0x0, 0xf6) shutdown(r1, 0x0) 03:37:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x79d1, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/236, 0xec}, {0x0}], 0x2}, 0x2) shutdown(r1, 0x0) 03:37:13 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2521.261023][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2521.345136][ C0] net_ratelimit: 25 callbacks suppressed [ 2521.345144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2521.355074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2521.356563][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.362270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.367994][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2521.379444][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.385198][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:37:13 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2521.390918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.396692][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2521.402479][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2521.424208][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:13 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:13 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ac000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:13 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:13 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7a, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2521.610715][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2521.700134][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0xb}, 0x0) 03:37:19 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:19 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ad000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:19 executing program 2: 03:37:19 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:19 executing program 0: [ 2527.545364][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2527.585068][ C0] net_ratelimit: 24 callbacks suppressed [ 2527.585076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2527.585102][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2527.590769][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2527.608172][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2527.613948][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2527.619900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2527.625665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2527.631452][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2527.637473][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:19 executing program 2: 03:37:19 executing program 0: [ 2527.643245][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:37:19 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:20 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ae000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:20 executing program 2: 03:37:20 executing program 0: [ 2533.825124][ C0] net_ratelimit: 24 callbacks suppressed [ 2533.825134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2533.825143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2533.825182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2533.830825][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2533.853747][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2533.859600][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2533.865388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2533.871148][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2533.876898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2533.882650][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x300}, 0x0) 03:37:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x300, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:28 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:28 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0x10}, {r0}, {r0}, {}], 0x4, 0x8000000004d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffffdd, 0x0, 0x0, 0x800e0086e) ppoll(&(0x7f00000000c0)=[{}], 0x24b4, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 03:37:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002700)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e0054d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000100)={0x0, 0xffffffffffffffd3, &(0x7f00000001c0), 0x302}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r2, 0x0) nanosleep(&(0x7f0000000080)={0x100000000}, &(0x7f0000000180)) shutdown(r3, 0x0) shutdown(r1, 0x0) 03:37:28 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3af000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:28 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2535.985506][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:28 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x500, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/210, 0xd2}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xea1ca13a, 0x0, 0x0, 0x800e007a8) shutdown(r1, 0x0) recvfrom$inet(r2, 0x0, 0xff1d, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) [ 2536.159064][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:28 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b0000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x600, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2536.306791][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2540.065112][ C0] net_ratelimit: 24 callbacks suppressed [ 2540.065132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2540.065138][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2540.082226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2540.087995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2540.093736][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2540.099518][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2540.105251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2540.110977][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2540.116712][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2540.122445][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:37:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x2}, 0x0) 03:37:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x700, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff9e, &(0x7f0000001540)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe08}, {0x0}], 0x6}, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = dup(r1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup2(r2, r4) setsockopt$sock_timeval(r5, 0xffff, 0x1006, &(0x7f0000000240)={0x1}, 0xdc1c0d6f39485fbd) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) 03:37:34 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/189, 0xbd}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x34, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) poll(0x0, 0x0, 0x8000000000049) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x24f, 0x0, 0x0, 0x800e004fe) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/231, 0xe7}, {0x0}, {0x0}, {0x0}], 0x1000000000000154}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) read(r6, &(0x7f0000000140)=""/23, 0x17) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 2542.216680][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2542.288573][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x900, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {r0}], 0x6, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x0, 0x0, 0x800e00516) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, &(0x7f0000000140), 0x8) shutdown(r1, 0x0) 03:37:34 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2542.435925][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2542.497309][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0xffffff77, &(0x7f0000002a40)=[{&(0x7f0000000480)=""/227, 0xe3}, {0x0}, {0x0}, {0x0}, {0x0}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/185, 0xb9}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000040)=""/78, 0x4e}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)=""/119, 0x77}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) shutdown(r6, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:37:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b3000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2546.305212][ C0] net_ratelimit: 25 callbacks suppressed [ 2546.305220][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.305239][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2546.310885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2546.328026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.333755][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2546.339518][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.345275][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x3}, 0x0) 03:37:38 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xa00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:38 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:38 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1}, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2a4e, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) accept$inet(r0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 03:37:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000014c0)=""/66, 0x42}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x2, 0x0, 0x800e00515) shutdown(r1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x54, &(0x7f0000000000)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x118) recvfrom$inet(r2, 0x0, 0xff06, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) [ 2546.351035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.356837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2546.362623][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2546.407500][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:38 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xb00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:38 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b5000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2546.519527][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x421, &(0x7f0000000000)={@broadcast, @empty=[0xffffffff00000006, 0xf000, 0x0, 0x500, 0x0, 0xe0], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00801) [ 2546.597661][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x3}, {r0}], 0x3, 0x0, &(0x7f0000000100), 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/248, 0xf8}], 0x1000000000000025}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:37:38 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:38 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2546.722755][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2546.798419][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2552.545087][ C0] net_ratelimit: 25 callbacks suppressed [ 2552.545096][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2552.545114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2552.550765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2552.567900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2552.573635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2552.579430][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2552.585294][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x4}, 0x0) 03:37:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b6000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:44 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000280)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}], 0x4}, 0x40002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffe3, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000000)) recvfrom$inet(r1, 0x0, 0x251277ea, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) 03:37:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/244, 0xf4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) msgget(0x1, 0x544) recvfrom$inet(r1, 0x0, 0xd172, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 2552.591017][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2552.596772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2552.602547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2552.674246][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2552.734596][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:45 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b7000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xe00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/165, 0xa5}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00551) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/158, 0x9e}, {0x0, 0x277}, {0x0}], 0x100000000000009b) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e00559) shutdown(r4, 0x0) readv(r2, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/86, 0x56}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r5, 0x0) shutdown(r2, 0x0) 03:37:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/117, 0x75}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffef4, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f00000049c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0, 0xfffffffffffffd70}, {0x0, 0xffffffffffffff80}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10000000000002a9, 0x0, 0x9}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r7, &(0x7f0000000700)=[{&(0x7f0000000000)=""/35, 0x23}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r6, 0x0) shutdown(r3, 0x0) 03:37:45 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2552.884196][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:45 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b8000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2552.991165][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2558.785101][ C1] net_ratelimit: 24 callbacks suppressed [ 2558.785122][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2558.790784][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.796487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.802168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2558.807862][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2558.819266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.825018][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xa}, 0x0) 03:37:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xec0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:51 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b9000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:51 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000200)=[{}, {r0}, {}, {}], 0x4, 0x8000000000047) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507) r2 = dup(r1) recvfrom$inet(r1, 0x0, 0x37b, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 03:37:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xb84, 0x0, 0x0, 0x800e00529) shutdown(r0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_mreq(r2, 0x0, 0xc, &(0x7f0000000080)={@remote={0xac, 0x14, 0x0}}, 0x8) recvfrom$inet(r1, 0x0, 0x100000279, 0x0, 0x0, 0x800e00521) shutdown(r1, 0x0) [ 2558.830782][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.836533][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2558.842301][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.947623][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2559.010365][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:51 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ba000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/229, 0xe5}, {0x0}, {0x0}, {0x0}], 0x4) recvfrom$inet(r2, 0x0, 0x73a0dc0, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1}, 0x40002) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r7, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/171, 0xab}, {0x0}, {0x0}], 0x3) shutdown(r6, 0x0) shutdown(r3, 0x0) 03:37:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xf00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:51 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000180)={0x800}, 0x10) socketpair(0x2, 0x0, 0x400, 0x0) recvfrom$inet(r1, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 2559.194547][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:51 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3bb000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2559.289391][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2565.025082][ C0] net_ratelimit: 25 callbacks suppressed [ 2565.025089][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.035072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.036484][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2565.042196][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2565.047899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.059504][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2565.065302][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.071011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2565.076762][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.082469][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xe}, 0x0) 03:37:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x1051, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:57 executing program 2: poll(&(0x7f0000000000), 0x200000000000004e, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfe05, 0x0, 0x0, 0x800e00515) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x410, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, 0x0, 0xfffffd64, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) 03:37:57 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:37:57 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3bc000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffe9c, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) select(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 2565.256251][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x2000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:37:57 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3bd000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2565.394748][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:57 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2565.461231][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:37:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00849) 03:37:57 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3be000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:37:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4800, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2565.676467][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2565.722493][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2571.265085][ C0] net_ratelimit: 26 callbacks suppressed [ 2571.265091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.275102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.276496][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2571.282178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2571.288000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.299432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2571.305182][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.310921][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2571.316648][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.322380][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x60}, 0x0) 03:38:03 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:38:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4c00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3bf000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:03 executing program 0: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000100)={0x0, 0xfed1}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xb5962e0fc0aae43, 0x0, 0x0, 0x800e0050f) shutdown(r1, 0x0) 03:38:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00849) [ 2571.567835][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="dfcae88a04b4", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) msgget(0xffffffffffffffff, 0x0) msgget(0x2, 0x200) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00c48) [ 2571.640143][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c0000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x5110, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:04 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2571.776513][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2571.832522][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x5865, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:04 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2571.968074][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2577.505147][ C1] net_ratelimit: 25 callbacks suppressed [ 2577.505196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.510909][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.516657][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.522353][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.528087][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.539440][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.545172][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.550877][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.556609][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.562369][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:12 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:38:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x300}, 0x0) 03:38:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:12 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:12 executing program 2: 03:38:12 executing program 0: [ 2579.885680][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:12 executing program 0: 03:38:12 executing program 2: 03:38:12 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c3000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:12 executing program 0: 03:38:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6558, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:12 executing program 2: [ 2580.139239][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:12 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2580.214210][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2583.745197][ C0] net_ratelimit: 23 callbacks suppressed [ 2583.745226][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2583.745232][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2583.762321][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2583.768077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2583.773834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2583.779601][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2583.785337][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2583.791052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2583.796903][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2583.802666][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:38:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xa00}, 0x0) 03:38:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r0, 0x0, 0x4a, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0039f) 03:38:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r2 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r0, 0x0) recvfrom$inet(r2, 0x0, 0x1356699bbe3a1579, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) shutdown(r2, 0x0) 03:38:18 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:18 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6800, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:18 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2586.210280][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2586.297879][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:18 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c5000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:18 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6c00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:18 executing program 2: poll(&(0x7f0000000200)=[{}, {}], 0x2, 0x46) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x35c9, 0x0, 0x0, 0x800e00505) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040)={0x0, 0x10001}, 0x10) setsockopt$inet_int(r3, 0x0, 0x4, &(0x7f0000000080), 0x4) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 03:38:18 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 2586.430026][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2586.535580][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:18 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c6000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:18 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7400, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2586.672760][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2586.731604][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2589.985178][ C1] net_ratelimit: 23 callbacks suppressed [ 2589.985187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2589.985232][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2589.990865][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2589.996587][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2590.014062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2590.019768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2590.025503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2590.031215][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2590.036958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2590.042704][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff07, 0x0, 0x0, 0x800e004c1) shutdown(r0, 0x0) shutdown(r1, 0x0) 03:38:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xe00}, 0x0) 03:38:24 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:38:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7a00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:24 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c7000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) shutdown(r1, 0x0) recvfrom$inet(r0, 0x0, 0xa4d, 0x2002, 0x0, 0x800e0050d) shutdown(r0, 0x0) [ 2592.528302][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/244, 0xf4}, {0x0, 0xffffffffffffffb1}, {0x0}, {0x0}], 0x394}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe79, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000140)={0x8000}, 0x104) accept4$inet6(r4, 0x0, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x503, 0x0, 0x0, 0x800e0051d) shutdown(r3, 0x0) 03:38:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)=""/81, 0x51}, {0x0}, {0x0}], 0x3}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1001e, 0x0, 0x0, 0x800e0063e) r2 = dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xff8c, 0x0, 0x0, 0x800e00639) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x142}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 03:38:24 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c8000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2592.669094][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x8100, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:25 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) [ 2592.811026][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:25 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3c9000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/231, 0xe7}], 0x1}, 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f0000000b00), 0x200) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 2592.942313][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2596.225228][ C1] net_ratelimit: 23 callbacks suppressed [ 2596.225268][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2596.230921][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2596.236652][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2596.242324][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2596.248028][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2596.259481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2596.265222][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2596.270982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2596.276756][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2596.282506][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:38:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x129f}, 0x0) 03:38:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:34 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) 03:38:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ca000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffec8, 0x0, 0x0, 0x800e00539) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000018c0)=""/152, 0x98}, {0x0}], 0x2}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r6, &(0x7f0000001780)=[{&(0x7f0000000280)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r5, 0x0) shutdown(r2, 0x0) 03:38:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000400)={0x0, 0x48, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1a1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x2, 0x0, 0x800e00515) shutdown(r1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xff06, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) [ 2601.928557][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2601.988182][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3cb000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)=""/69, 0x45}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/242, 0xf2}], 0x1}, 0x2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e007a9) shutdown(r5, 0x0) shutdown(r2, 0x0) 03:38:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc00e, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:34 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) [ 2602.149807][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000034c0)=[{&(0x7f0000000040)=""/163, 0xa3}, {0x0}], 0x3f9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvfrom$inet(r2, 0x0, 0xffffff1f, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 2602.222162][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3cc000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2602.465131][ C0] net_ratelimit: 23 callbacks suppressed [ 2602.465141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.475071][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.476571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.482275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.488005][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.499450][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.505316][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.511044][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.516823][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.522576][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.705105][ C0] net_ratelimit: 26 callbacks suppressed [ 2608.705125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.705131][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.722343][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.728117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.733828][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.739560][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.745333][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.751046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.756790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.762519][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:38:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x6000}, 0x0) 03:38:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xff03, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e0077e) shutdown(r0, 0x0) r2 = dup(r1) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r2, 0x0) 03:38:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3cd000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:44 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 03:38:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/150, 0x96}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xea1ca13a, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) setsockopt$inet_mreq(r1, 0x0, 0xc, &(0x7f0000000980)={@loopback}, 0x8) recvfrom$inet(r2, 0x0, 0xff1d, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) [ 2612.378901][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x33fe0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ce000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2612.510669][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2612.565462][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0xfcfba49177337ad0, &(0x7f0000000040)={0x5, {{0x1c, 0x1c, 0x2}}, {{0x1c, 0x1c, 0x3}}}, 0x108) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e00359) 03:38:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/119, 0x77}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) poll(&(0x7f0000000100)=[{r3, 0xfffffffffffffffe}], 0x1, 0x4e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00a4f) poll(&(0x7f0000000000), 0x2000000000000011, 0x1ff) shutdown(r2, 0x0) 03:38:44 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 03:38:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3cf000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2614.945105][ C1] net_ratelimit: 24 callbacks suppressed [ 2614.945139][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2614.950774][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2614.956522][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2614.962183][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2614.967911][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2614.979652][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2614.985393][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2614.991133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2614.996875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2615.002602][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:38:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x9f12}, 0x0) 03:38:52 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x34000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:52 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 03:38:52 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d0000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:38:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000000)=""/253, 0xfd}, {0x0}, {0x0}], 0x3}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$inet_buf(r3, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xcd44, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) 03:38:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x3c1, 0x2, 0x0, 0x800e007ae) shutdown(r0, 0x0) [ 2620.693982][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:53 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x40000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:38:53 executing program 0: poll(&(0x7f0000000140)=[{}, {}, {}], 0x3, 0x8000000000046) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x4e, 0x0, 0x0, 0x800e004e7) r1 = dup(r0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1) shutdown(r1, 0x0) 03:38:53 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2620.821226][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:53 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) recvfrom$inet(0xffffffffffffffff, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/239, 0xef}, {0x0}, {0x0}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/148, 0x94}, {0x0}, {0x0}], 0x3) shutdown(r2, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) poll(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) 03:38:53 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0), 0x10) [ 2620.936950][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:38:53 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x400300, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2621.106266][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2621.185069][ C1] net_ratelimit: 25 callbacks suppressed [ 2621.185078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2621.185097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2621.190851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2621.208117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2621.213935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2621.219717][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2621.225465][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2621.231209][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2621.236995][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2621.242825][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2627.425095][ C1] net_ratelimit: 25 callbacks suppressed [ 2627.425118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2627.425124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2627.425158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2627.430817][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2627.436550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2627.459362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2627.465137][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2627.470905][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2627.476618][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2627.482391][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:39:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x1000000}, 0x0) 03:39:01 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x1000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x0, 0xffff}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/138, 0x8a, 0x40002, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xff8c, 0x0, 0x0, 0x800e00520) r2 = socket$inet6_sctp(0x1c, 0x3, 0x84) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/204, 0xcc}, {0x0}], 0x2}, 0x0) shutdown(r1, 0x0) 03:39:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/70, 0x46}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0xec4f}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r2, 0x0) 03:39:01 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0), 0x10) [ 2628.995104][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x2000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:01 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d3000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2629.141569][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:01 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0), 0x10) 03:39:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x363, &(0x7f0000000a80), 0x10000000000001e2, 0x0, 0x28c}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000000)=""/149, 0x95}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) ppoll(&(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0, 0x0, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) [ 2629.242732][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:01 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x3000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2629.459166][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2629.508595][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2633.665096][ C0] net_ratelimit: 24 callbacks suppressed [ 2633.665132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.670758][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.682188][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.687993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.693733][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.699491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.705253][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.711003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.716808][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.722605][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:39:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x2000000}, 0x0) 03:39:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}, {0x0}], 0x3}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/34, 0x22}, {0x0}], 0x2}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00551) shutdown(r4, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) poll(0x0, 0x0, 0x4e) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r7, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00dce) poll(&(0x7f00000000c0)=[{}, {r6}], 0x2, 0x1fb) shutdown(r5, 0x0) shutdown(r2, 0x0) 03:39:10 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d5000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:10 executing program 2: 03:39:10 executing program 0: 03:39:10 executing program 0: [ 2638.330114][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:10 executing program 2: 03:39:10 executing program 0: 03:39:10 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d6000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2638.429277][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:10 executing program 2: 03:39:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002680)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x10000000003, 0x84) readv(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/98, 0x62}, {0x0}], 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 2639.905114][ C0] net_ratelimit: 24 callbacks suppressed [ 2639.905123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.905143][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.910787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.928033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.933749][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.939488][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.945218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.950939][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.956656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.962387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2646.145093][ C1] net_ratelimit: 23 callbacks suppressed [ 2646.145117][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2646.150761][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2646.150794][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2646.156559][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2646.173694][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2646.179461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2646.185186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2646.190927][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2646.196675][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2646.202396][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:39:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x3000000}, 0x0) 03:39:18 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x5000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/230, 0xe6}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1001e, 0x0, 0x0, 0x800e0063e) r2 = dup(r0) shutdown(r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000480)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xff8c, 0x0, 0x0, 0x800e00639) shutdown(r3, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/87, 0x57}, {0x0}], 0x2}, 0x42) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:39:18 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d7000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup2(r2, r3) fcntl$getflags(r4, 0x0) recvfrom$inet(r4, 0x0, 0xffffff27, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) shutdown(r2, 0x0) 03:39:18 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) poll(&(0x7f0000000040)=[{}, {}, {}, {r0}, {}], 0x5, 0x80000000004e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f00000000c0), 0x8) shutdown(r1, 0x0) [ 2646.690624][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2646.745835][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:19 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001700)={0x0, 0xff18, &(0x7f0000000080), 0x10000000000001a0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) openat(0xffffffffffffffff, 0x0, 0xcc018bb388019b27, 0x0) recvfrom$inet(r1, 0x0, 0x2c0, 0x2, 0x0, 0x800e00510) shutdown(r1, 0x0) 03:39:19 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d8000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2646.840435][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/9, 0x9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbcd0, 0x42, 0x0, 0x800e00505) shutdown(r1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x100000114, 0x2, 0x0, 0x800e00510) shutdown(r2, 0x0) [ 2646.917349][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:19 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:19 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3d9000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2647.005803][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2647.067341][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x4000000}, 0x0) 03:39:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1044e, 0x0, 0x0, 0x800e00527) shutdown(r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xff1d5344, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) 03:39:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00718) 03:39:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x8000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3da000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/88, 0x58}], 0x100000000000000e}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x24deb73, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/138, 0xffffff41}, {0x0, 0xfffffffffffffe1e}, {0x0, 0x32a}], 0x10000000000000ee}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000400)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 2650.927106][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2650.967713][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x9000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3db000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffef4, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) getsockopt$inet_opts(r1, 0x0, 0x1, 0x0, &(0x7f0000000000)) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) [ 2651.078609][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) dup(r0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00466) 03:39:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xa000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3dc000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2651.219186][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2652.385123][ C1] net_ratelimit: 24 callbacks suppressed [ 2652.385160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.390803][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.396571][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.402225][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.407971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.419363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.425091][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.430828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.436568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.442302][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2658.625094][ C1] net_ratelimit: 25 callbacks suppressed [ 2658.625110][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2658.625116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2658.625141][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2658.630892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2658.653696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2658.659437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2658.665737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2658.671463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2658.677212][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2658.682937][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:39:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xa000000}, 0x0) 03:39:31 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xb000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:31 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3dd000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000100)=""/205, 0xcd}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x19363e, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) recvfrom$inet(r2, 0x0, 0x3546e3c50663cc7c, 0x2, 0x0, 0x800e00545) shutdown(r1, 0x0) 03:39:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/243, 0xf3}, {0x0}], 0x2}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001b40)=""/92, 0x5c}, {0x0}, {0x0}], 0x3}, 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) 03:39:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0, 0x13a}, {0x0}, {0x0}], 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x9457, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) recvfrom$inet(r1, 0x0, 0xff06, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) [ 2659.247399][T16581] __nla_validate_parse: 1 callbacks suppressed [ 2659.247408][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2659.312167][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:31 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:31 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3de000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001940)=[{0x0}, {&(0x7f0000000500)=""/167, 0xa7}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e0054d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/193, 0xc1}], 0x1, 0x0, 0xffffffffffffff93}, 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e00559) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000480)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 2659.400971][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x331, &(0x7f0000000000)=[{&(0x7f0000000300)=""/134, 0x86}, {0x0}, {0x0}, {0x0}], 0x1, 0x0, 0x15b}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x893f, 0x0, 0x0, 0x800e00519) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/108, 0x6c}], 0x1}, 0x2) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) read(r2, &(0x7f0000000080)=""/203, 0x100000070) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x42) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 2659.473445][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:31 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:31 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3df000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2659.598832][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2659.644305][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xe000000}, 0x0) 03:39:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) clock_gettime(0xe, &(0x7f0000000200)) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00728) 03:39:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xe000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2084}, {r0}], 0x2, 0x0) poll(&(0x7f0000000080)=[{r0, 0x4}, {r0}], 0x2, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffff0, 0x0, 0x0, 0x800e00ac5) ppoll(&(0x7f00000000c0)=[{r0}], 0x4e, &(0x7f0000000040)={0x0, 0x10000004}, 0x0, 0x0) shutdown(r1, 0x0) 03:39:35 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e0000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:35 executing program 0: poll(&(0x7f0000000000), 0x2017, 0x53) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xff8c, 0x0, 0x0, 0x800e004c5) shutdown(r0, 0x0) [ 2663.482812][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2663.525319][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000034c0)=[{&(0x7f0000000040)=""/163, 0xa3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 03:39:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) recvfrom$inet(r0, 0x0, 0x100000379, 0x0, 0x0, 0x800e00681) shutdown(r0, 0x0) 03:39:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xf000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:35 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2663.681626][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2663.722309][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:36 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x10000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000000)=""/243, 0xf3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) shutdown(0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff6000/0x8000)=nil, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x0) [ 2664.865097][ C0] net_ratelimit: 23 callbacks suppressed [ 2664.865105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2664.865141][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2664.870812][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2664.887950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2664.893670][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2664.899431][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2664.905185][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2664.910908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2664.916665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2664.922753][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.105078][ C1] net_ratelimit: 24 callbacks suppressed [ 2671.105088][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.105095][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2671.105144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.110863][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2671.116561][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2671.139395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.145142][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2671.150991][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.156739][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2671.162478][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:39:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x60000000}, 0x0) 03:39:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:44 executing program 0: poll(0x0, 0x0, 0x57) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffd1b, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) shutdown(r1, 0x0) 03:39:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x20000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0xfffffffffffffd33, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0d56, 0x2, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) fcntl$dupfd(r1, 0x11, r2) recvfrom$inet(r3, 0x0, 0xe5, 0x2, 0x0, 0x800e00551) shutdown(r3, 0x0) 03:39:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00387) [ 2671.785971][T16679] __nla_validate_parse: 2 callbacks suppressed [ 2671.785994][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x48000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2671.865793][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e3000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2671.965495][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2672.006648][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4c000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x4a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xff5b, 0x0, 0x0, 0x800e004c7) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}, 0xf23ed1402f29832) shutdown(r1, 0x0) 03:39:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000700)=[{r0, 0x80}], 0x1, 0x0) poll(&(0x7f0000000080)=[{r0}, {}], 0x2, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00a4f) poll(&(0x7f00000000c0), 0x8, 0x100) shutdown(r1, 0x0) 03:39:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2672.126974][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x9effffff}, 0x0) 03:39:48 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {r0}, {}], 0x6, 0x800000000004a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffffa9, 0x0, 0x0, 0x800e00516) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000200)=""/139, 0x8b}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40042) shutdown(r2, 0x0) 03:39:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x51100000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:48 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e5000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000080)=""/234, 0xea}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00546) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1}, 0x42) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000001880)=[{&(0x7f00000001c0)=""/83, 0x53}, {0x0}, {0x0}], 0x3) shutdown(r5, 0x0) shutdown(r2, 0x0) 03:39:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f00000017c0)=[{&(0x7f0000000080)=""/59, 0x3b}, {0x0}], 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0xd, &(0x7f0000000040), 0x8) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) [ 2676.068543][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x60000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2676.119787][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:48 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e6000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/165, 0xa5}, {0x0}, {0x0}], 0x100000000000035d}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) r2 = dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}], 0x2) shutdown(r3, 0x0) shutdown(r1, 0x0) [ 2676.203825][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:48 executing program 2: shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/231, 0xe7}], 0x227}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/67, 0x43}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/117, 0x75}], 0x1}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 03:39:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x65580000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2676.329524][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:48 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e7000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2676.372180][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2677.345090][ C1] net_ratelimit: 24 callbacks suppressed [ 2677.345100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.345118][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.350768][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.356504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.373629][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.379426][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.385268][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.390989][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2677.396722][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2677.402498][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:39:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x9f120000}, 0x0) 03:39:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x68000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:54 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f00000000c0)) recvfrom$inet(r0, 0x0, 0x893f, 0x0, 0x0, 0x800e006a8) shutdown(r0, 0x0) 03:39:54 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e8000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:39:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/111, 0x6f}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000280)={0x0, 0xffffff1b, &(0x7f00000002c0), 0x80}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r4, 0x0) shutdown(r2, 0x0) 03:39:54 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0xe26ba493573c81ef}, {r0, 0x1}], 0x2, 0x0) poll(&(0x7f0000000000)=[{r0, 0xfffffffffffffffe}], 0x1, 0x4b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffffde, 0x0, 0x0, 0x800e00861) poll(&(0x7f0000001200)=[{r0}], 0x1, 0x81) shutdown(r1, 0x0) [ 2682.377135][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e006ee) shutdown(r0, 0x0) [ 2682.426870][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6c000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:39:54 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3e9000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2682.523457][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0xfcef}, 0x10) recvfrom$inet(r0, &(0x7f0000000100)=""/90, 0x83, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040)={0x7fffffff}, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 2682.584587][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:39:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}, {0x0}, {0x0}, {0x0}], 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 03:39:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x74000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2682.717131][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2682.759609][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2683.585081][ C0] net_ratelimit: 25 callbacks suppressed [ 2683.585090][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.585108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.590757][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2683.596616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2683.602314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.619403][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2683.625130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.630879][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2683.636600][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2683.642326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2689.825097][ C0] net_ratelimit: 25 callbacks suppressed [ 2689.825106][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2689.825127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2689.830829][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2689.847967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2689.853687][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2689.859455][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2689.865243][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2689.870983][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2689.876890][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2689.882638][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:40:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 03:40:02 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ea000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:02 executing program 2: poll(&(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x59c, 0x0, 0x0, 0x800e004de) r1 = dup(r0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) recvfrom$inet(r0, 0x0, 0x1000001ab, 0x0, 0x0, 0x800e004e5) shutdown(r1, 0x0) 03:40:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7a000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000040)=[{}, {r0}, {}], 0x3, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffdd2, 0x0, 0x0, 0x800e0051e) shutdown(r3, 0x0) 03:40:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) recvfrom$inet(r0, 0x0, 0x100000379, 0x2, 0x0, 0x800e00681) shutdown(r0, 0x0) [ 2690.691855][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) clock_getres(0xe, &(0x7f0000000040)) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00371) [ 2690.743349][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3eb000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x81000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:03 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) 03:40:03 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4}], 0x2e, 0x0) [ 2690.900130][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x88a8ffff, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2691.008649][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2691.072869][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2696.065077][ C0] net_ratelimit: 25 callbacks suppressed [ 2696.065086][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2696.065108][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2696.070878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2696.088196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2696.094055][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2696.099859][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2696.105609][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2696.111338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2696.117121][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2696.122907][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:40:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xffffff7f}, 0x0) 03:40:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) 03:40:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4200, 0x0) 03:40:09 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ec000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:09 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x9effffff, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)={0x7f, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x0, @rand_addr=0xff}}, {{0x2, 0x4e23, @empty}}]}, 0x190) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000340)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305828, &(0x7f0000001300)={0x2880008, r1}) bind(0xffffffffffffffff, &(0x7f0000000080)=@hci={0x1f, 0x0, 0x1}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x3c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r5}, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11}, 0x3c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) pwritev(r6, &(0x7f0000000580)=[{&(0x7f00000004c0)="eeedb3a266463297fec951bfe2887ef321b138dcda2db13948496482e16a5dbb562db6aa6d7fad5f906464be6046fb482efc8e5f9ef8e7ddfbdd565f6ee27e9d3e9d302ffa7f13349d66c3e7d1df68f792828e696e0b9f624075526c56ecea4e82bb314b79ae40ee98c6ac3d2ce1018e71cf2e99066f109d0019e4438330483443bb1df48f413512a151a83491b8684300a91e4d0ce6575f0b4ce7b00e794e2b38881c28c5", 0xa5}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r6, 0x0, 0x8}) socket(0x11, 0x800000003, 0x0) [ 2697.017099][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:09 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0xe, 0x0) [ 2697.122156][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:09 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ed000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/155, 0x9b}], 0x1) 03:40:09 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbb24fec2fba09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x1000, 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xffffff28, 0x3e8}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:40:09 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc0000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:09 executing program 0: prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) rmdir(&(0x7f0000000280)='./bus\x00') lstat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2697.323674][T16911] IPVS: ftp: loaded support on port[0] = 21 [ 2697.388707][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2702.305129][ C0] net_ratelimit: 22 callbacks suppressed [ 2702.305137][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.305159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.310807][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.327949][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.333707][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.339452][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.345166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.350880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2702.356653][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2702.362378][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:40:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xffffff9e}, 0x0) 03:40:18 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ee000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:18 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc00e0000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:18 executing program 0: memfd_create(&(0x7f0000000080)='vboxnet1[ppp0%eth1\x00', 0x0) r0 = socket(0x200001000000011, 0x4000000000000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) r2 = fcntl$dupfd(r0, 0x0, r0) write$ppp(r2, &(0x7f0000000080)="dd00b6b3c6b17f26e9d1000086dd", 0x36) 03:40:18 executing program 3: request_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000500)={'\x03Yz', 0x2}, 0x0, 0x0) 03:40:18 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x4e}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0) 03:40:18 executing program 3: [ 2706.343470][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:18 executing program 2: 03:40:18 executing program 0: 03:40:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000001c0)=""/58) [ 2706.492091][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:18 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ef000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:18 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) [ 2708.545075][ C0] net_ratelimit: 25 callbacks suppressed [ 2708.545084][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.545113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.550772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2708.556491][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2708.562243][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.579345][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2708.585103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.590814][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2708.596549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2708.602318][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xfffffff0}, 0x0) 03:40:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_TSC(0x1a, 0x1) 03:40:23 executing program 3: 03:40:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xe03f0300, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f0000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 03:40:23 executing program 3: [ 2711.426922][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:23 executing program 0: [ 2711.490885][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:23 executing program 0: 03:40:23 executing program 3: 03:40:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xeffdffff, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2711.697857][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2711.756275][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2714.785112][ C0] net_ratelimit: 25 callbacks suppressed [ 2714.785122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2714.785147][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2714.802229][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2714.808028][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2714.813809][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2714.819698][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2714.825446][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2714.831168][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2714.836915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2714.842663][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2721.025134][ C1] net_ratelimit: 25 callbacks suppressed [ 2721.025159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2721.030811][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2721.036573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2721.042245][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2721.047970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2721.059381][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2721.065225][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2721.070947][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2721.076702][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2721.082463][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x10000000000}, 0x0) 03:40:37 executing program 3: 03:40:37 executing program 0: 03:40:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xf0ffffff, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:37 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:37 executing program 2: [ 2724.868804][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:37 executing program 3: 03:40:37 executing program 0: 03:40:37 executing program 3: 03:40:37 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f3000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:37 executing program 0: [ 2725.057903][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, "3431b6d4ebd9bc5b066a598cde04f8b1e907978bca1791ce5968d3b808ca5a9155449afffc970f33225eab59e77a9704a28df3f9350010700fbe1ed4da7db4b6", "2cfc9bb499003bd59175414ae825b9c1fca58f25b9ee26ca667d352769e74a162aec16fd5de2d46bc628d7ffce790d8fd9f58c1d91ade68f9c819fdaf77e2e9b", "5000a9e3224f461bb4d8d8c5844bf6983eaea59f03be2402a206c2b95e5b3bc7"}) [ 2727.265175][ C0] net_ratelimit: 26 callbacks suppressed [ 2727.265202][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2727.265208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2727.265255][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2727.270918][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2727.293785][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2727.299533][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2727.305261][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2727.310974][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2727.316886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2727.322604][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.505104][ C0] net_ratelimit: 25 callbacks suppressed [ 2733.505113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.515078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.516503][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.522195][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.527921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.539327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.545067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.550773][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2733.556502][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2733.562245][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x100000000000000}, 0x0) 03:40:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}], 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/79, 0x4f}, {0x0}, {0x0}, {0x0}], 0x4) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) poll(0x0, 0x0, 0xff) shutdown(r5, 0x0) shutdown(r2, 0x0) 03:40:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/153, 0x99}, {0x0}, {0x0}, {0x0, 0x13b}, {0x0}], 0x1000000000000186) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507) shutdown(r0, 0x0) r2 = dup(r1) r3 = dup(r2) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000040), 0x4) recvfrom$inet(r1, 0x0, 0xcffa, 0x2, 0x0, 0x800e0050e) shutdown(r3, 0x0) 03:40:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xff030000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:46 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000000)=""/195, 0xc3}], 0x1}, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/221, 0xdd}, {0x0}, {0x0}], 0x3) shutdown(r3, 0x0) shutdown(r1, 0x0) [ 2734.246013][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xffffa888, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2734.291819][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:46 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f5000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2734.370758][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/55, 0x37}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) recvfrom$inet(r3, 0x0, 0x1ad642ebf5a40a41, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) shutdown(r3, 0x0) 03:40:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xfffffdef, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:46 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f6000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2734.511783][T17058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xffffff7f, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2734.607161][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2734.647516][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2739.745111][ C1] net_ratelimit: 25 callbacks suppressed [ 2739.745135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.745141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.745178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.750806][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.756536][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.779436][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.785309][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.791091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2739.796861][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2739.802613][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:40:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x200000000000000}, 0x0) 03:40:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xffffff9e, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/144, 0x90}, {0x0}, {0x0}], 0x3}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x7f, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000)={0x10001}, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) shutdown(r3, 0x0) 03:40:55 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f7000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:40:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r1, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) shutdown(r3, 0x0) 03:40:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0xfffffe88, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/244, 0xf4}, {0x0}, {0x0}, {0x0}, {0x0, 0x7a}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe79, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) accept$unix(r4, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x30b, 0x0, 0x0, 0x800e0051d) shutdown(r3, 0x0) [ 2743.603224][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xfffffff0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2743.656982][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:56 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f8000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2743.734821][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 03:40:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:40:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002780)=[{&(0x7f0000000140)=""/224, 0xe0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) getsockopt(r1, 0x8, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xe5, 0x2, 0x0, 0x800e00545) shutdown(r2, 0x0) [ 2743.883216][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:40:56 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3f9000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2743.925288][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2745.985141][ C1] net_ratelimit: 22 callbacks suppressed [ 2745.985168][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2745.990805][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2745.996546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2746.002218][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2746.007941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2746.019370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2746.025081][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2746.030816][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2746.036555][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2746.042299][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2752.225072][ C0] net_ratelimit: 25 callbacks suppressed [ 2752.225098][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2752.225121][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2752.230859][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2752.247997][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2752.253751][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2752.259521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2752.265260][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2752.270982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2752.276708][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2752.282435][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:41:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x300000000000000}, 0x0) 03:41:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x3, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:07 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x240, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x8000000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507) r2 = dup(r1) r3 = dup(r2) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/240, 0xf0}], 0x1}, 0x2) shutdown(r3, 0x0) 03:41:07 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3fa000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/109, 0x6d}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x470, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0) shutdown(r1, 0x0) 03:41:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000000c0)={0x3}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x2a0b1e03, 0x800002, 0x0, 0x800e005af) shutdown(r0, 0x0) [ 2754.953800][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2754.992122][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:07 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3fb000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2755.075826][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/9, 0x9}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) socketpair(0x0, 0x0, 0x6, 0x0) recvfrom$inet(r2, 0x0, 0x3afa, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) [ 2755.127465][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x5, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:07 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3fc000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2755.242735][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2755.294532][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2755.376336][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2755.418777][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2758.465120][ C1] net_ratelimit: 25 callbacks suppressed [ 2758.465163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.470785][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.476617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2758.482277][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2758.488030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.499411][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2758.505225][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.510986][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2758.516785][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2758.522538][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:41:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x400000000000000}, 0x0) 03:41:16 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3fd000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/139, 0x8b}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x9}, 0x10) msgget(0x1, 0x0) recvfrom$inet(r4, 0x0, 0x1cd, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) 03:41:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000019c0)=[{&(0x7f00000001c0)=""/180, 0xb4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/98, 0x62}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000340)=""/152, 0x98}], 0x381}, 0x0) r6 = dup(r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r7, 0x0, 0xccf3, 0x0, 0x0, 0x800e00551) shutdown(r6, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r8, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/231, 0xe7}, {0x0}], 0x2) shutdown(r7, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:41:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x345a, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$sock_linger(r3, 0xffff, 0x80, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xfffffe98, 0x2, 0x0, 0x800e00511) shutdown(r2, 0x0) [ 2764.173872][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2764.218261][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x8, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:16 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3fe000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffffdc, 0x4000000000000002, 0x0, 0x800e00589) shutdown(r0, 0x0) [ 2764.307239][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2764.429782][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:16 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3ff000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2764.548656][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2764.705078][ C0] net_ratelimit: 25 callbacks suppressed [ 2764.705088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.705105][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.710764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.710800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.733620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.739441][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.745177][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.750902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2764.756622][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2764.762343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.945083][ C0] net_ratelimit: 25 callbacks suppressed [ 2770.945105][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.950832][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.962249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.968009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.973713][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.979449][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.985176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2770.990896][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2770.996623][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2771.002374][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:41:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xa00000000000000}, 0x0) 03:41:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000000)=""/243, 0xf3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x383}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000180), 0x10) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) shutdown(r2, 0x0) 03:41:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xb, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x400000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/84, 0x54}, {0x0}, {0x0}, {0x0}], 0x4}, 0x42) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x100000114, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) [ 2771.377709][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:26 executing program 2: 03:41:26 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:26 executing program 0: 03:41:26 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x401000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:26 executing program 3: 03:41:26 executing program 3: 03:41:26 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xffffff31, 0x0, 0x0, 0x800e0083e) ppoll(&(0x7f0000000040)=[{r0, 0x2}], 0x7, 0x0, 0x0, 0x0) shutdown(r0, 0x0) close(r0) [ 2774.585758][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2777.185191][ C0] net_ratelimit: 24 callbacks suppressed [ 2777.185200][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2777.185217][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.190880][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.208262][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2777.213996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.219795][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2777.225561][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.231292][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2777.237053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2777.242793][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:41:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xe00000000000000}, 0x0) 03:41:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/82, 0x52}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/58, 0x3a}], 0x1}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 03:41:32 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x402000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xd, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/251, 0xfb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527) shutdown(r1, 0x0) socketpair(0x1, 0x0, 0x3, 0x0) recvfrom$inet(r2, 0x0, 0xfffffdc4, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) 03:41:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {r0}, {}, {}], 0x8, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{}, {}], 0x2, 0x4c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) r3 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000000)=""/35, 0x23}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r2, 0x0) shutdown(r1, 0x0) [ 2780.738829][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:33 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x403000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2780.829446][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/252, 0xfc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x40002) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2d79, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) fstat(r1, &(0x7f00000001c0)) recvfrom$inet(r2, 0x0, 0xfffffd21, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) [ 2780.938050][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x10, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/212, 0xd4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000140)={0x6}, 0x10) fcntl$getflags(0xffffffffffffffff, 0x1) recvfrom$inet(r1, 0x0, 0xd282, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 2781.032178][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2783.425075][ C1] net_ratelimit: 24 callbacks suppressed [ 2783.425084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2783.425118][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2783.430799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2783.436520][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2783.453636][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2783.459395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2783.465154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2783.470923][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2783.476691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2783.482457][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:41:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x6000000000000000}, 0x0) 03:41:40 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x404000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x48, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)=""/139, 0x8b}, {0x0}, {0x0}], 0x3}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00526) shutdown(r0, 0x0) dup(r0) recvfrom$inet(r1, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521) shutdown(r1, 0x0) 03:41:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x800e003c6) 03:41:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000000)=""/109, 0x6d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 2788.000291][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4c, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:40 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x405000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2788.098186][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x60, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {0x0}], 0x100000000000012e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffdc1, 0x0, 0x0, 0x800e005b9) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/70, 0x46}], 0x1}, 0x40002) shutdown(r0, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) shutdown(r1, 0x0) [ 2788.207953][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x68, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:40 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x406000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2788.292370][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2789.665182][ C1] net_ratelimit: 23 callbacks suppressed [ 2789.665191][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2789.665224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2789.670859][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2789.676680][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2789.693904][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2789.699666][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2789.705394][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2789.711142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2789.716904][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2789.722642][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.905075][ C0] net_ratelimit: 23 callbacks suppressed [ 2795.905084][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.905112][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.910791][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.927936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.933784][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.939544][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.945286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.951091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2795.956826][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2795.962604][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:41:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 03:41:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6c, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:49 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x407000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/144, 0x90}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0dd6, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xffffffea, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) 03:41:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) semget(0x3, 0x7, 0x200) recvfrom$inet(r0, 0x0, 0xfffffdc4, 0x42, 0x0, 0x800e0072f) shutdown(r0, 0x0) 03:41:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x8e08, 0x0, 0x0, 0x800e005bd) shutdown(r0, 0x0) 03:41:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/173, 0xad}], 0x100000000000000d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xf229, 0x0, 0x0, 0x800e00526) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) shutdown(r2, 0x0) [ 2797.294537][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x74, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:49 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x408000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2797.435662][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/55, 0x37}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/204, 0xcc}, {0x0}], 0x2}, 0x0) shutdown(r2, 0x0) 03:41:49 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7a, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/95, 0x5f}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0062d) shutdown(r0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/169, 0xa9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r2, 0x0) [ 2797.528082][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2802.145190][ C1] net_ratelimit: 24 callbacks suppressed [ 2802.145226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.150883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.156635][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.162298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.168034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.179447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.185174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.190947][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2802.196670][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2802.202417][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:41:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x9f12000000000000}, 0x0) 03:41:59 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x409000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:41:59 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:41:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000180)=[{}, {r1}, {}, {r0}], 0x4, 0x47) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r2, r3) readv(r2, &(0x7f0000003540)=[{&(0x7f0000000000)=""/230, 0xe6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) shutdown(r3, 0x0) 03:41:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe05, &(0x7f0000000300)=[{&(0x7f0000000240)=""/123, 0x3f1}], 0x100000000000029e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/219, 0xdb}, {0x0}, {0x0}], 0x3}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) readv(r1, &(0x7f0000002900)=[{&(0x7f0000000000)=""/153, 0x99}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:41:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) fchdir(r1) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e004ae) shutdown(r0, 0x0) [ 2807.707155][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:42:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x300, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:00 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x40a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2807.808845][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:42:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x500, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x100000000000002a) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001740)=[{&(0x7f0000000100)=""/57, 0x39}, {0x0}, {0x0}], 0x3) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 03:42:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x12}, {r0, 0x4}, {r2, 0x40}, {r0, 0x80}, {r0, 0x10}], 0x5, &(0x7f0000000140)={0x1, 0x515d16a7}, &(0x7f0000000180)={0xfffffffffffff001}, 0x8) recvfrom$inet(r2, 0x0, 0x3c7, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) 03:42:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x600, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2808.385078][ C0] net_ratelimit: 25 callbacks suppressed [ 2808.385088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.385107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.390781][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.407933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.413643][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.419443][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.425189][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.430938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2808.436710][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2808.442463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.625074][ C1] net_ratelimit: 24 callbacks suppressed [ 2814.625084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.625120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2814.630880][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2814.636625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.653714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2814.659445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.665174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2814.670893][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2814.676611][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2814.682334][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:42:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) 03:42:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x700, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:10 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x40b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/12, 0xc}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffdd9, 0x42, 0x0, 0x800e00505) shutdown(r0, 0x0) fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) recvfrom$inet(r1, 0x0, 0x100000114, 0x2, 0x0, 0x800e00510) shutdown(r1, 0x0) 03:42:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000040)=""/12, 0xc}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x30, &(0x7f00000000c0)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x268}], 0x6, 0x0, 0xffffffffffffffc8}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)=""/119, 0x77}, {0x0, 0xa5}, {0x0, 0xd1}], 0x3}, 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) 03:42:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001840)=[{&(0x7f00000000c0)=""/252, 0xfc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/64, 0x40}], 0x1}, 0x800000042) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/35, 0xff65}], 0x100000000000012f) shutdown(r4, 0x0) shutdown(r1, 0x0) 03:42:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x900, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xb00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:10 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x40c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:10 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0}, {r0}], 0x2, 0x8000000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e004fe) recvmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2) shutdown(r1, 0x0) [ 2820.865089][ C0] net_ratelimit: 25 callbacks suppressed [ 2820.865099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.865116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.870775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.876496][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.882219][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.899306][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.905032][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.910768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2820.916506][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2820.922278][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.105113][ C0] net_ratelimit: 26 callbacks suppressed [ 2827.105122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.105164][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.111046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.128163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.133891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.139636][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.145353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.151116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2827.156847][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2827.162595][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:42:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 03:42:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xd00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x40d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/152, 0x98}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000002c0)={0x40000000}, 0x10) fcntl$getown(r1, 0x5) recvfrom$inet(r1, 0x0, 0x9da6205d, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 03:42:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001600)=""/107, 0x6b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x89f6, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) msgget(0x0, 0x0) recvfrom$inet(r2, 0x0, 0xa792, 0x0, 0x0, 0x800e0051d) shutdown(r2, 0x0) 03:42:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/45, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) shutdown(r3, 0x0) 03:42:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xec0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x40e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/100, 0x64}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0d56, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) recvfrom$inet(r3, 0x0, 0xe5, 0x2, 0x0, 0x800e00551) shutdown(r3, 0x0) 03:42:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1051, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2833.345128][ C1] net_ratelimit: 24 callbacks suppressed [ 2833.345169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.350794][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.356528][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.362202][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.367927][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.379320][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.385111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.390897][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2833.396669][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2833.402412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.585109][ C0] net_ratelimit: 25 callbacks suppressed [ 2839.585116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.595100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.596796][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.602484][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.608256][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.619654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.625495][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.631230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2839.636999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2839.642988][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:42:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 03:42:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0xa}, 0xa) recvfrom$inet(r1, 0x0, 0x10201, 0x0, 0x0, 0x800e0051d) shutdown(r1, 0x0) 03:42:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:33 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x40f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:33 executing program 0: 03:42:33 executing program 2: 03:42:33 executing program 0: 03:42:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4800, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4c00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:33 executing program 0: 03:42:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x5110, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:33 executing program 0: [ 2845.825134][ C0] net_ratelimit: 25 callbacks suppressed [ 2845.825143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.825161][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.830908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.848258][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.854020][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.859796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.865609][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.871355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2845.877113][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2845.882922][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:42:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 03:42:41 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x410000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:41 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x5865, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:41 executing program 0: 03:42:41 executing program 3: 03:42:41 executing program 2: 03:42:41 executing program 3: 03:42:41 executing program 0: 03:42:41 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:41 executing program 3: 03:42:41 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6558, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:41 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x411000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2852.065084][ C0] net_ratelimit: 23 callbacks suppressed [ 2852.065093][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.065119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.070766][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.087931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.093678][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.099406][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.105129][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.110842][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2852.116561][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2852.122290][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:42:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 03:42:47 executing program 0: 03:42:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6800, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:47 executing program 3: 03:42:47 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x412000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:47 executing program 2: 03:42:48 executing program 3: 03:42:48 executing program 0: 03:42:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6c00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:48 executing program 0: 03:42:48 executing program 3: 03:42:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7400, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2858.305113][ C0] net_ratelimit: 25 callbacks suppressed [ 2858.305136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.310777][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.322180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.327906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.333648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.339415][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.345141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.350890][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2858.356725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2858.362500][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:42:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 03:42:55 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x413000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:42:55 executing program 3: 03:42:55 executing program 0: 03:42:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7a00, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:55 executing program 2: 03:42:55 executing program 0: 03:42:55 executing program 3: 03:42:55 executing program 0: 03:42:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x8100, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:42:55 executing program 3: 03:42:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2864.545127][ C0] net_ratelimit: 23 callbacks suppressed [ 2864.545136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2864.545177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2864.550840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2864.567993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2864.573739][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2864.579498][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2864.585255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2864.591009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2864.596766][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2864.602514][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:43:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xa}, 0x0) 03:43:02 executing program 0: 03:43:02 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x414000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:02 executing program 3: 03:43:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00e, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:02 executing program 2: 03:43:02 executing program 3: 03:43:02 executing program 0: 03:43:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xff03, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:02 executing program 0: 03:43:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x33fe0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:02 executing program 3: [ 2870.785112][ C0] net_ratelimit: 25 callbacks suppressed [ 2870.785121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2870.785139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2870.790810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2870.808000][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2870.813732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2870.819514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2870.825253][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2870.830997][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2870.836818][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2870.842558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.025112][ C0] net_ratelimit: 24 callbacks suppressed [ 2877.025183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.030896][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.036616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2877.042318][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2877.053736][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.059495][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2877.065260][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.071003][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2877.076777][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2877.082505][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xe}, 0x0) 03:43:12 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x415000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:12 executing program 0: 03:43:12 executing program 3: 03:43:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x34000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:12 executing program 2: 03:43:13 executing program 3: 03:43:13 executing program 0: 03:43:13 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x40000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:13 executing program 3: 03:43:13 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x416000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:13 executing program 0: [ 2883.265155][ C0] net_ratelimit: 24 callbacks suppressed [ 2883.265165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.265182][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.270846][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.276556][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.282265][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.299415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.305185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.310912][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2883.316662][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2883.322459][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x60}, 0x0) 03:43:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x400300, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:21 executing program 3: 03:43:21 executing program 0: 03:43:21 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x417000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:21 executing program 2: 03:43:21 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) poll(&(0x7f0000000080)=[{r0, 0x2}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x22c1, 0x0, 0x0, 0x800e00506) recvmsg(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/193, 0xc1}, {0x0}], 0x2}, 0x0) shutdown(r1, 0x0) 03:43:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xb4, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400000) 03:43:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:21 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x418000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x3000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2889.505085][ C0] net_ratelimit: 26 callbacks suppressed [ 2889.505096][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2889.515052][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2889.516511][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2889.522167][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2889.527906][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2889.539317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2889.545117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2889.550873][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2889.556680][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2889.562388][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.745209][ C0] net_ratelimit: 26 callbacks suppressed [ 2895.745240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.750893][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2895.762300][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.768035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2895.773737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.779453][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2895.785157][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.790881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2895.796647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2895.802394][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2901.985071][ C0] net_ratelimit: 23 callbacks suppressed [ 2901.985080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2901.985127][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2901.990757][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2902.007932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2902.013688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2902.019419][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2902.025150][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2902.030922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2902.036647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2902.042370][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:43:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 03:43:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x1) r3 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r3, 0x402, 0x0) 03:43:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0xa, 0x1d, 0x400, 0xc, 0x42}, 0x3c) 03:43:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x419000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:34 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2880000aaaaaaaaaabb86dd60391b47ffbe000000000000002d00000000000000000000ff0200000000000000000000000000010000907800000000d0875dbb179a6b000000000000000000"], 0x0) 03:43:34 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x40d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x5000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:34 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x408000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:35 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3fe000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:35 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x41a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2908.225094][ C0] net_ratelimit: 22 callbacks suppressed [ 2908.225101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.235065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.236577][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2908.242249][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2908.247983][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.259367][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2908.265111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.270818][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2908.276557][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2908.282283][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:43:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xa00}, 0x0) 03:43:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:43 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xeffdffff, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:43 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7a000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x41b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:43 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x60000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2910.987638][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2911.014278][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x8000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:43 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:43 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3b1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x41c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x9000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2911.189006][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:43 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x3aa000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2914.465155][ C1] net_ratelimit: 25 callbacks suppressed [ 2914.465190][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2914.470911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2914.476669][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2914.482327][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2914.488056][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2914.499437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2914.505285][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2914.511108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2914.516824][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2914.522540][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:43:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xe00}, 0x0) 03:43:50 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4"], 0x4c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:43:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:50 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x41d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:50 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x2, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2918.155226][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:43:52 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x60000000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:52 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xb000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:52 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x9effffff00000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:52 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) lstat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f17799d6707432ff48bc085763314166443ce72c74f3db890e1ff15a10d11f67e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd313660489c4c971a548ea5480dae93c7e33bdef00000000d8fd8c6e62d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db2699f1210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607f7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f9197e7a5513c13e79d46bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4ef5b2ed463764c41592ed959028085f5005d6a3ada8b037bf4a59681c997fcbc105490cf16c21692191340540a70108b5751523bca456e67dd51268a9abe5bf6970f927a2f7699db448fae15d34f17b45e121779ab5e84235acd23"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) chmod(&(0x7f0000000180)='./file0\x00', 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280)="5162b6b599c1847980661de5c74b07f710ce18b3b98275b8e95faa02331542acfc6d8922e9f93225b4453cf5c431431aae63ff6d0181098721a5e74aaea2737cfedb9fc1e124ea17a3cec8abc5e073408b670903634a568e7461482ff618514ca63e8720fe72d6d9e825bfc71ed6183ccbdb866f0e67633ce7abe48bea50483ca9fd4f6259a8110207be25d4ce55269cb6019fd632307e5757be13891dab097f0ad0a7f4ddf59a2fed6dfedf1ccc7f97ae", 0xb1, 0xfffffffffffffffd) keyctl$get_security(0x11, r2, &(0x7f0000000380)=""/144, 0x90) 03:43:52 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x41e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2920.399524][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:43:52 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:43:52 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x41f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:43:52 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xd000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2920.705083][ C0] net_ratelimit: 23 callbacks suppressed [ 2920.705092][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2920.715072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2920.716516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2920.722200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2920.727953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2920.739341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2920.745129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2920.750864][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2920.756644][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2920.762376][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2926.945079][ C0] net_ratelimit: 24 callbacks suppressed [ 2926.945162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2926.950755][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2926.956473][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2926.962161][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2926.973648][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2926.979458][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2926.985311][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2926.991044][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2926.996803][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2927.002571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2930.786388][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:44:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x129f}, 0x0) 03:44:03 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x37e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:03 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x36e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x420000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x20020000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) rmdir(&(0x7f0000000180)='./file0\x00') 03:44:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x10000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r0, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, &(0x7f0000000100)) 03:44:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc={0x27, 0x4}, 0x80, 0x0}, 0x0) 03:44:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x20000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:04 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x421000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 2933.185184][ C0] net_ratelimit: 25 callbacks suppressed [ 2933.185193][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.185212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.190873][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.208037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.213751][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.219497][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.225220][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.230935][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2933.236710][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2933.242435][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.425123][ C0] net_ratelimit: 24 callbacks suppressed [ 2939.425131][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.435070][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.436613][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2939.442301][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2939.448065][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.459569][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2939.465369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.471079][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2939.476826][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2939.482582][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x6000}, 0x0) 03:44:13 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x48000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) 03:44:13 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) clone(0x8007fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)=0x0) chown(&(0x7f0000000080)='./file0\x00', r2, 0x0) 03:44:13 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x422000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:13 executing program 2: perf_event_open(&(0x7f0000000600)={0x1, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x17) bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@xdp={0x2c, 0x1}, 0x56) getsockname$packet(r2, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) 03:44:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x20020000) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) rmdir(&(0x7f0000000180)='./file0\x00') 03:44:13 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4c000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:13 executing program 0: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) 03:44:13 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x51100000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:13 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x423000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:13 executing program 0: r0 = socket$kcm(0xa, 0x6, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x200600) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.events\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r4}) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='cpuacBt.usage_user\r', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r8 = socket$kcm(0x11, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0xff98, 0x0, 0xfffffffffffffda9}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8b) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r7, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair(0x9, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000018c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000002980)=""/6, 0x6}, 0x12040) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r11, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x200600) sendmsg$kcm(r11, &(0x7f0000000240)={&(0x7f0000002a00)=@can={0x1d, r10}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000003c0)="d87f3307c296fa26db8805a03f34d7ec5e6a803d2c788e3eeeff58e808d9f57a70e82fa8886513a0bc4d0b81880ea6bbe98a877896ac4a7edccbcf3137ce66fc240d3c2be0296a5640bb4d8b4178cd19f8c6", 0x52}], 0x1}, 0x800) [ 2945.665068][ C1] net_ratelimit: 25 callbacks suppressed [ 2945.665078][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2945.665095][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2945.670853][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2945.676580][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2945.693659][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2945.699406][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2945.705136][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2945.710858][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2945.716655][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2945.722455][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2947.190404][T17932] device lo entered promiscuous mode [ 2947.196945][T17896] device lo left promiscuous mode 03:44:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x9f12}, 0x0) 03:44:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x60000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:22 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 03:44:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x424000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:22 executing program 3: 03:44:22 executing program 2: 03:44:22 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x36d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x65580000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x425000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x68000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:22 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xfffffff0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2950.482805][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6c000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2951.905177][ C0] net_ratelimit: 25 callbacks suppressed [ 2951.905186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2951.905212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.910868][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.928035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2951.933761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.939521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2951.945356][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.951101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2951.956844][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2951.962619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.145127][ C1] net_ratelimit: 25 callbacks suppressed [ 2958.145159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.150807][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.150845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.156565][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.173786][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.179547][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.185439][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.191151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2958.196920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2958.202664][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 03:44:33 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x426000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:33 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x361000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x74000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:33 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) lstat(0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400000, 0x0) connect$netrom(r2, &(0x7f0000000280)={{0x3, @bcast, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) 03:44:33 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:44:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7a000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:33 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:44:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x81000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x88a8ffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x427000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) lstat(0x0, 0x0) geteuid() fchown(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000140)={{0x80, 0xba}, {0xa1, 0x4b}, 0x1, 0x5, 0x80}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff}, 0x28) [ 2964.385092][ C0] net_ratelimit: 25 callbacks suppressed [ 2964.385101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2964.385119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.390796][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.407945][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2964.413664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.419479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2964.425220][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.430939][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2964.436674][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2964.442402][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.625083][ C1] net_ratelimit: 25 callbacks suppressed [ 2970.625090][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.635058][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.636486][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2970.642179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2970.653598][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.659386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2970.665176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.670933][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2970.676685][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2970.682409][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 03:44:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x9effffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:45 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:45 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x428000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:45 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xe64, '\x00', 0xfffffffe}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_emit_ethernet(0x51, &(0x7f00000000c0)={@random="c781053f6737", @dev={[], 0xe}, [], {@ipx={0x8137, {0xffff, 0x43, 0x2, 0x4, {@broadcast, @random="56c9e64a4e73", 0x8}, {@random=0x7, @broadcast, 0x5}, "e119ce4bbaecd16f1d916de5fad16c440c59f7e9f36d8767f6c804a94df58bc2dcb6f09534"}}}}, &(0x7f0000000140)={0x0, 0x3, [0x51d, 0xa29, 0x6be, 0xed5]}) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x204, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r5, &(0x7f0000000480), 0x10000000000001e2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup3(r6, r7, 0x0) dup2(r9, r8) r10 = perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) r12 = accept(r6, &(0x7f00000001c0)=@rc, &(0x7f0000000240)=0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r11, 0x100}, &(0x7f0000000340)=0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000700)={r11, @in={{0x2, 0x4e22, @remote}}, 0x1000, 0xcc9f}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000100)={r11, 0x7e3ae58a}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000200)={r11, 0x78, "166810578ba367ade97a7e08b62036fbac5b903bd6a652ea445bb7465a95739a9778a032c6c25134407852ffc70ec722dc855e00ca57fc4059190c7805244f03f40daafb0a996897940ab2b0eaee754ecf48acee177f79df7d7b4c77db66b30604e3affc8708456db3645b2eb9d55ce408b7834c33a4e6e2"}, &(0x7f0000000280)=0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={r13, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x23be, 0x0, 0x1, 0x8}, &(0x7f0000000380)=0x98) 03:44:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:44:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc0000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2972.975713][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:44:45 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) lstat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f17799d6707432ff48bc085763314166443ce72c74f3db890e1ff15a10d11f67e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd313660489c4c971a548ea5480dae93c7e33bdef00000000d8fd8c6e62d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db2699f1210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607f7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f9197e7a5513c13e79d46bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4ef5b2ed463764c41592ed959028085f5005d6a3ada8b037bf4a59681c997fcbc105490cf16c21692191340540a70108b5751523bca456e67dd51268a9abe5bf6970f927a2f7699db448fae15d34f17b45e121779ab5e84235acd23"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff, 0x0, 0x2000000}, 0x28) 03:44:45 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x429000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00e0000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:45 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r2, @loopback, @remote}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x4, 0x6, 0xc, 0x496cc3e190a379e1, 0x7fffffffffffffff, 0x1}, @map={0x18, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000080)='GPL\x00', 0x6, 0x18, &(0x7f00000000c0)=""/24, 0xc0f00, 0x1, [], r2, 0x5, r0, 0x8, &(0x7f0000000100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xc, 0x8, 0x7f}, 0x10}, 0x70) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r3, &(0x7f0000000480), 0x10000000000001e2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) splice(r3, &(0x7f0000000200)=0x7fff, r4, &(0x7f0000000240)=0x7, 0x1ff, 0x2) 03:44:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe03f0300, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2976.865198][ C1] net_ratelimit: 26 callbacks suppressed [ 2976.865228][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2976.870872][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2976.876625][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2976.882301][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2976.888035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2976.899416][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2976.905178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2976.910903][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2976.916669][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2976.922412][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:44:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 03:44:54 executing program 3: write(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) lstat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff, 0x0, 0x2000000}, 0x28) 03:44:54 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x404080) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r6, &(0x7f0000000480), 0x10000000000001e2, 0x0) getpeername$tipc(r6, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) r7 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r8, &(0x7f0000000740)=@ll={0x11, 0x0, r3, 0x1, 0xdc, 0x6, @link_local}, 0x80) sync_file_range(r0, 0x20, 0x7fffffff, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000308000000ffffff06000000d985a7ba1fe1cfa9565e718eabf6b5da9e758be8d1ea6e058442086a0213b564fb267491b0ab8e23234b7abb0f89089643d0ee2cc2448ee1b4d99f9232e0106ea29d08ab4305bebe1c471ccdba9eebb06587801a4a9b964f0012043d92c58f11c9c3276e62fae53d4a1906", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000048fa09411def712d902f5004cff7a025b73e6bea84278f39abb0c500da0bf211f87591351d3e104cd10787ac62ac70f16659993ef2e9e95189e6587acd26b8f3"], 0x80}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="081095b5691450f598693ec3ccdf842947842693bd393fa54625dcd9eb58d1ab027ae4d34a5fd07b77e7b09406c492c53348a2678f32b0fb4c6c2142ccd22f9088d90b073ccc5a0b5d64f2b2f9a5cff2d10978dc6bbe2be928d69c69ec02705be4ebef253cf180124bc165a0524ec7560c39eb812555bed97201e071041b4b694e1c0982404e8ccfe503e2490ba0504925cae190d24337d5cedfe20e0a9b2def35da126f580ecb250b8326ef4795d44e12e833f39f92b5ceef8646665a1b937fd4613a089600", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000040000000000048fa09411def712d902f5004cff7a025b73e6bea84278f39abb0c500da0bf211f87591351d3e104cd10787ac62ac70f16659993ef2e9e95189e6587acd26b8f3"], 0x80}}, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:44:54 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x42a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xeffdffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:54 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:44:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf0ffffff, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xff030000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:44:54 executing program 0: r0 = gettid() perf_event_open(&(0x7f0000000580)={0x1, 0xffffff23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:44:54 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000040)="6e163e78e965c692f057d36c4bfdd641c12172aff178dbb5b1be978fe344359166fec0b4cc74ecb96395bd727b83f54ca0fb4e5c00ef1ed5ab4f04ff029595554e98944c8df941fdf9a3937afc94cf8863128022b6be3b865b94c5721a7e9ea85ff8187841846bf8146cac07e9dd4db66b1f4b489e23a0dc842981a0e72782ca5b2a04750c08a6c824dac638e9a1ed73e156689e58c7676b9657df13b2257dfbd18e4b3bba9463b16f91a4c507de912f6f107016b9da8a1fd6266337748f359a4cb13cdce05d9f89c1ab94c1aebf765ea79cc6a2bf6a8b89e7132fe8a19715", &(0x7f0000000140)="1acfd26cb9fa7bfa94eac9a8c6ddc74fe69a0e63600110284c3665668e90cf02439c1f4424090b707d7ba7ba759011e3a51c5cc858f21f6f231442ecae5122d200a1e4b59b24dc901317bd9a9b1f570305d7b86642b438d1717045d77accc406be1181319a0e862ce2daa4305ee24d428eaea9a4466f993adc7052284ad60f93c6ffab99790e8e15d4f9eda1eac940aaca6719a23775b02b0a06bb8b80df7f39764a700759328d850af0ae4fd273c3b5f88d9f0a6ac1426c152cd302d36753bb7bf71ab85df3ba959f"}}, &(0x7f0000000280)=0x0) timer_getoverrun(r0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f00000003c0)=0x1) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r5, 0x0) rt_sigsuspend(&(0x7f00000002c0)={0x6b17}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x80001, 0x0) 03:44:54 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x42b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:44:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffa888, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2983.105114][ C0] net_ratelimit: 21 callbacks suppressed [ 2983.105123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2983.105159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2983.110798][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2983.127961][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2983.133680][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2983.139451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2983.145202][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2983.150933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2983.156755][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2983.162530][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.345081][ C1] net_ratelimit: 24 callbacks suppressed [ 2989.345089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.345095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.345128][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2989.350808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2989.356540][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.379378][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2989.385126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.390834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2989.396684][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2989.402403][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) 03:45:02 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x300000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfffffdef, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:02 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39d609873e5ea1a1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x404000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0x1, &(0x7f0000000040)="05dd5bc451108e77d27f169ff6ab033aa65630c8c39e2a86bf02759a3f", &(0x7f0000000080)=""/165}, 0x20) shmget(0x0, 0x1000, 0x800, &(0x7f0000002000/0x1000)=nil) 03:45:02 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x42c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/101, 0x65) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffff7f, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/101, 0x65) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffff9e, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x6, 0x408180) ftruncate(r1, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000205, 0x11, r3, 0x3ff) 03:45:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x42d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xfffffff0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 2995.585093][ C0] net_ratelimit: 23 callbacks suppressed [ 2995.585117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.590775][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.596498][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.602219][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.613578][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.619287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.625139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.630848][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2995.636649][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2995.642364][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xa000000}, 0x0) 03:45:12 executing program 0: perf_event_open(&(0x7f0000000580)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r6 = getegid() fcntl$getownex(r4, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r10, 0x0, r11) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) write$FUSE_ATTR(r2, &(0x7f0000000080)={0x78, 0x0, 0x1, {0x7, 0x7ff, 0x0, {0x2, 0x81, 0xffffffffffffff5a, 0x15b1, 0x22, 0x0, 0x5, 0x8, 0x9, 0x5, 0x2805358f, r3, r11, 0x0, 0x1}}}, 0x78) 03:45:12 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0x5, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:12 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x42e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/101, 0x65) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x40030000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:12 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x2f4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x100000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:12 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x42f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x200000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000080)=0xe, 0xc00) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x684, 0x2) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r2, 0x0) [ 3001.825101][ C1] net_ratelimit: 22 callbacks suppressed [ 3001.825135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3001.830764][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3001.836526][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3001.842189][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3001.847914][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3001.859319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3001.865073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3001.870857][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3001.876601][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3001.882338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.065104][ C1] net_ratelimit: 25 callbacks suppressed [ 3008.065136][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.070769][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.076531][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.082220][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.087939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.099333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.105077][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.110855][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3008.116608][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3008.122355][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xe000000}, 0x0) 03:45:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x300000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:23 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x4) ioctl$KDDELIO(r1, 0x4b35, 0xffffffffffffffe0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r3, &(0x7f0000000480), 0x10000000000001e2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r4, @loopback, @remote}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x13, 0xffffff63, 0x80000001, 0x0, 0x100, r3, 0x8, [], r4, r1, 0x1}, 0x3c) ftruncate(r5, 0x1f) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timerfd_gettime(r6, &(0x7f0000000180)) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_xfrm(r11, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4010000110010002cbd7000ffdbdf25ac1414bb000000000000000000000000000004d60a002b00240017000200000027bd70002bbd70002abd03d14bbca9a8b37ddb96b412bd64700029bd7000d69c00000100000001000000800001007368613531322d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0010000901a5129a22215d096f37239c532aaa37b30279398b23ad3339aa8c520c63e377f9b7e5434e034ae40e0945e4dcb2ad56a838e2f996d00007c00120061656769733132382d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080010000c000000004c9df42fd918898f0c633d34060052dfde07392bc82b4b84a84bde467ff2edf8295b163a5fa4287578cd5fb46b5d603240009000200eeff000000000400000000000000cd710000000000000300000000000000380008003400080001052c009fdece46dd70e51f922d1a03ba02a1a4ce37e3590ae8ad5cf1a90ca31a8e"], 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000000140)=0x10000, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) preadv(r7, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$USBDEVFS_SETCONFIGURATION(r13, 0x80045505, &(0x7f0000000080)=0x549) 03:45:23 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r3 = getegid() fcntl$getownex(r1, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r7, 0x0, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000800), &(0x7f0000000840)) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x380, 0x9, &(0x7f0000000700)=[{&(0x7f00000000c0)="2b5296d39168d8c4fc368c7324", 0xd, 0x2}, {&(0x7f0000000100)="fee50a1686a61f39792099a696d9924a644e78a66192e08282dcaf5436863d8dd8dfb603fb6a38957083b01489abc1d49a5ab06de214ff00a24700d8b3e71bb8905fde9c532b2d99812d11010177052cca69f96d1d1fbefabf586ee0f0240676a722ab716f363093ffe449ecc0bb5823c9ba3f957dde8bcd36ecac5c0d6e94b2c572f42ecec461d420961add9aa6b7cbbbf49f0bca1f1ebb68ac57678ae5b8116e0100e091ea22329b94260780ab8cae7e63b5e3b4cff507", 0xb8, 0x1}, {&(0x7f00000001c0)="a4f7611c439ba596af77a6f17908244558d88b17f313049b032179419bc6f75378de2b7817746461689a0f71b82d299d5582381d451a060c420a58a14d419a01130a415be8a1", 0x46, 0xfffffffffffffff7}, {&(0x7f0000000240)="84e9cbdfa7e547d227daebc880968a6f94da5993d9123afa937d3bfb3cf86b687f7df3e3bef643", 0x27}, {&(0x7f0000000280)="fd9e73e39e3d97abd0b948fdb7049ec99082b8620f8680c9ccf8758b0e38a1eff996b4525baffc6f1b21f0ba1f00d1367c8c64f5a54bfb2c52c8b6500db94eafe497b8659a8992fd030394282bc9e4ff22f6faaa5a6c004e5ea375a7496f64ab9a7e9ae6a132addc279eccc2c6af70a2d30ff05909b0b2bf00da6f77ed649e31f752acf00ae262448454b7c5406a5bb4deeee1419bedbeb5f7c9f9041e6a4a55ae714ab7042bab1009452e8e5a846f4d08968e542a2b2e21ec38419a06", 0xbd, 0x7}, {&(0x7f0000000340)="26ba7ced2b7e2e1883fb43c8ee0d6363f3d577b3030ba5c55a97972176daca05804b7a3799a79bce1924247525f93a84ea1bf916d89f72583135eb73181deade7d22babb255eb5721151e2afe84f35467506155ba80746bc21cf4fa5f183d27060f490964f7217ae042fd14786d329feb6a928a2d0ae01733cfbaf266d03caf1cd8402ff27bd014bc1906a623890598c00f439ffe0180294cb73c9bdb20912b33bba4b9ca18ad00f28778065ad", 0xad, 0x4}, {&(0x7f0000000400), 0x0, 0x8001}, {&(0x7f0000000440)="f81567012b5c242f370b0276d1ad8af2b2aacfb9c521f8c262e084fc2c17b8c14c8293060de2ec83bb2acd24b48427f054281572f8cbb6db2964e9f707dcd7d7ed4fa0c32b2b0eb2d65a74359a39c94e90ae4f2b896f5fa2fa74361b1ad298717053075a54f1bb4ea9a1543d0089112a9b1f23de0b626e4b9d439eef9365bf3c1c4cb2621594118a3d00dbf341a7a3a041bb", 0x92, 0x7fff}, {&(0x7f0000000600)="7c6af32ff082504850b662fefcd40d208b6debd9cd756d9d5008dad869764d037685c55cb61aae839190bb639c642b3c6e79f41a8eed80bdd58b7b456cb36ac54c634d6701ac73f7ca97a009b92915ba986a3d5a406a6c2239bb8317941715de47c96679fc6163df76ad7a473cea017bc754569bdef6edbab3fd57afece58818bcc5809122aa1844584bc225fb568b0b4ee02b39afbcf7dd00075c408ff962733c89601ea68b3bca471fd5f255a8eb2b9968a9afe6c747585175eb2be9214e48d8d3cb311bfb80b9318ecdf3b45ac0b4a077ceb18752b2eef5190ae88448aebfbf875638827452244f8a1c6cb3792c9d235fe06d56cb70", 0xf7, 0x9}], 0xd1365806d0cb0d23, &(0x7f0000000940)={[{@cruft='cruft'}, {@dmode={'dmode', 0x3d, 0xfffffffffffffc88}}, {@dmode={'dmode', 0x3d, 0x1}}, {@uid={'uid', 0x3d, r6}}, {@check_relaxed='check=relaxed'}, {@session={'session', 0x3d, 0x7}}, {@norock='norock'}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@map_acorn='map=acorn'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&\\]$'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@obj_type={'obj_type', 0x3d, '@@.%'}}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@subj_type={'subj_type', 0x3d, 'user/'}}, {@uid_gt={'uid>', r9}}, {@euid_lt={'euid<', r10}}, {@fowner_gt={'fowner>', r11}}]}) 03:45:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x430000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/101, 0x65) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x400000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:23 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r3 = getegid() fcntl$getownex(r1, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r7, 0x0, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000800), &(0x7f0000000840)) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x380, 0x9, &(0x7f0000000700)=[{&(0x7f00000000c0)="2b5296d39168d8c4fc368c7324", 0xd, 0x2}, {&(0x7f0000000100)="fee50a1686a61f39792099a696d9924a644e78a66192e08282dcaf5436863d8dd8dfb603fb6a38957083b01489abc1d49a5ab06de214ff00a24700d8b3e71bb8905fde9c532b2d99812d11010177052cca69f96d1d1fbefabf586ee0f0240676a722ab716f363093ffe449ecc0bb5823c9ba3f957dde8bcd36ecac5c0d6e94b2c572f42ecec461d420961add9aa6b7cbbbf49f0bca1f1ebb68ac57678ae5b8116e0100e091ea22329b94260780ab8cae7e63b5e3b4cff507", 0xb8, 0x1}, {&(0x7f00000001c0)="a4f7611c439ba596af77a6f17908244558d88b17f313049b032179419bc6f75378de2b7817746461689a0f71b82d299d5582381d451a060c420a58a14d419a01130a415be8a1", 0x46, 0xfffffffffffffff7}, {&(0x7f0000000240)="84e9cbdfa7e547d227daebc880968a6f94da5993d9123afa937d3bfb3cf86b687f7df3e3bef643", 0x27}, {&(0x7f0000000280)="fd9e73e39e3d97abd0b948fdb7049ec99082b8620f8680c9ccf8758b0e38a1eff996b4525baffc6f1b21f0ba1f00d1367c8c64f5a54bfb2c52c8b6500db94eafe497b8659a8992fd030394282bc9e4ff22f6faaa5a6c004e5ea375a7496f64ab9a7e9ae6a132addc279eccc2c6af70a2d30ff05909b0b2bf00da6f77ed649e31f752acf00ae262448454b7c5406a5bb4deeee1419bedbeb5f7c9f9041e6a4a55ae714ab7042bab1009452e8e5a846f4d08968e542a2b2e21ec38419a06", 0xbd, 0x7}, {&(0x7f0000000340)="26ba7ced2b7e2e1883fb43c8ee0d6363f3d577b3030ba5c55a97972176daca05804b7a3799a79bce1924247525f93a84ea1bf916d89f72583135eb73181deade7d22babb255eb5721151e2afe84f35467506155ba80746bc21cf4fa5f183d27060f490964f7217ae042fd14786d329feb6a928a2d0ae01733cfbaf266d03caf1cd8402ff27bd014bc1906a623890598c00f439ffe0180294cb73c9bdb20912b33bba4b9ca18ad00f28778065ad", 0xad, 0x4}, {&(0x7f0000000400), 0x0, 0x8001}, {&(0x7f0000000440)="f81567012b5c242f370b0276d1ad8af2b2aacfb9c521f8c262e084fc2c17b8c14c8293060de2ec83bb2acd24b48427f054281572f8cbb6db2964e9f707dcd7d7ed4fa0c32b2b0eb2d65a74359a39c94e90ae4f2b896f5fa2fa74361b1ad298717053075a54f1bb4ea9a1543d0089112a9b1f23de0b626e4b9d439eef9365bf3c1c4cb2621594118a3d00dbf341a7a3a041bb", 0x92, 0x7fff}, {&(0x7f0000000600)="7c6af32ff082504850b662fefcd40d208b6debd9cd756d9d5008dad869764d037685c55cb61aae839190bb639c642b3c6e79f41a8eed80bdd58b7b456cb36ac54c634d6701ac73f7ca97a009b92915ba986a3d5a406a6c2239bb8317941715de47c96679fc6163df76ad7a473cea017bc754569bdef6edbab3fd57afece58818bcc5809122aa1844584bc225fb568b0b4ee02b39afbcf7dd00075c408ff962733c89601ea68b3bca471fd5f255a8eb2b9968a9afe6c747585175eb2be9214e48d8d3cb311bfb80b9318ecdf3b45ac0b4a077ceb18752b2eef5190ae88448aebfbf875638827452244f8a1c6cb3792c9d235fe06d56cb70", 0xf7, 0x9}], 0xd1365806d0cb0d23, &(0x7f0000000940)={[{@cruft='cruft'}, {@dmode={'dmode', 0x3d, 0xfffffffffffffc88}}, {@dmode={'dmode', 0x3d, 0x1}}, {@uid={'uid', 0x3d, r6}}, {@check_relaxed='check=relaxed'}, {@session={'session', 0x3d, 0x7}}, {@norock='norock'}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@map_acorn='map=acorn'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&\\]$'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@obj_type={'obj_type', 0x3d, '@@.%'}}, {@fsmagic={'fsmagic', 0x3d, 0x10001}}, {@subj_type={'subj_type', 0x3d, 'user/'}}, {@uid_gt={'uid>', r9}}, {@euid_lt={'euid<', r10}}, {@fowner_gt={'fowner>', r11}}]}) 03:45:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x500000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x431000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x600000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x700000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3014.305191][ C0] net_ratelimit: 23 callbacks suppressed [ 3014.305200][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3014.305221][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3014.310876][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3014.328055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3014.333810][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3014.339644][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3014.345432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3014.351163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3014.356927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3014.362656][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x60000000}, 0x0) 03:45:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) lstat(0x0, 0x0) geteuid() fchown(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x104, 0xf2ffffff}, 0x28) 03:45:29 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x800000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:29 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r2 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) fcntl$setlease(r4, 0x400, 0x5) keyctl$set_reqkey_keyring(0xe, 0x3) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r3, 0x0) 03:45:29 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x432000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:32 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000040)="609a154ad544c9bacb27574f95bedb12adcb9aa23d96f49ee76e5749e77261671cd1ee4bc93c246c36e9306baa2e1eec93fffbd5968b7f02004efad077984995f09832d32bad7f35b514350a034afd1e81d3e84b54afba8f9094c6b4bf0c80bc4257fcbbffa6e8e5f76735eafb2340d4f5357b1f8b4bc2679d1750eebbf9", 0x7e) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) close(0xffffffffffffffff) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x900000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:32 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r2 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) fcntl$setlease(r4, 0x400, 0x5) keyctl$set_reqkey_keyring(0xe, 0x3) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r3, 0x0) 03:45:32 executing program 0: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r2 = dup2(0xffffffffffffffff, r0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) fcntl$setlease(r4, 0x400, 0x5) keyctl$set_reqkey_keyring(0xe, 0x3) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r3, 0x0) 03:45:32 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x433000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:32 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000040)="609a154ad544c9bacb27574f95bedb12adcb9aa23d96f49ee76e5749e77261671cd1ee4bc93c246c36e9306baa2e1eec93fffbd5968b7f02004efad077984995f09832d32bad7f35b514350a034afd1e81d3e84b54afba8f9094c6b4bf0c80bc4257fcbbffa6e8e5f76735eafb2340d4f5357b1f8b4bc2679d1750eebbf9", 0x7e) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) close(0xffffffffffffffff) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) [ 3020.545048][ C0] net_ratelimit: 25 callbacks suppressed [ 3020.545056][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3020.545085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3020.550744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3020.567918][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3020.573671][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3020.579425][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3020.585169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3020.590936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3020.596696][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3020.602505][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 03:45:37 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x434000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:37 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm, @mss={0x2, 0x1}, @sack_perm], 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000400)={0x4, 0x70, 0x6, 0x7f, 0x4, 0x0, 0x0, 0x7, 0x18, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x2642, 0x5, 0xca6, 0x6, 0x1d, 0x4, 0x81}) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') r5 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffd3ad, 0x80200) r6 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r6) ptrace$setopts(0x4206, r6, 0x0, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000480)={0x2, r6}) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r9 = getegid() fcntl$getownex(r7, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r13, 0x0, r14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r15 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r15, &(0x7f0000000480), 0x10000000000001e2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000001c00)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000001d00)=0xe8) syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000540)='./file0\x00', 0xffff, 0x9, &(0x7f0000001b00)=[{&(0x7f0000000600)="cce9a5b332253035248733bff28ac66d546f2e1d9be70b180bb9e0d76f32c0e5ea21f96bfb95d28c8dfadf28f13629a0089658977e0f03534c69b6e90e26800f4b4875b4fc4d603e11832234b633a0", 0x4f, 0x3}, {&(0x7f0000000680)="8322bf464120479b51bbe6f820d9507750b9bbf33008fbbc07bcefb4cad81bf67510c4ac3bc061926e8e378a7c39b8cdc14ba874b372dd874397cc7879dd24090225", 0x42, 0x1000}, {&(0x7f0000000700)="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", 0x1000, 0x7}, {&(0x7f0000001700)="6e7d868383a7e64a3ab4fad61c784c03749a898488a6a9ad4c12774733a3416f6a377a436419158a3e362ed2f8fdb367108e5075ccfba8592fe4f7f46cb98c65433e0defd55c9df60916169f2a66b186207097eef73a6f37ab85805c6274a4f2f892713903ac596bcd69901b8f61b76fff835b6b513b5be086b9ba90064e8016f1496a96c003307a4aeb814bb72b3612488e560945d20c50636f73c06bacaf01f1f602858a1dcb2f712f08069bbd14ac740131f6f82324a2e1425e4670ba8533b7a82ea027b0f2abd48dfdd96042efe96f25aaa7009cb64f3b76641a7f3b52f108a4ff4547536b5683c6", 0xea, 0x1}, {&(0x7f0000001800)="4f7b4b20f8a84e68ee80ab31e63c80b9f2fb978bdc7247e9ae9a9e58ea58e889a09ab95b9c099e1e49b528d2ae71d277059f4addb6018e11eacf091e3c723ef2710e8fe324374fb01aa07b8b5dcb05e8d07010137e79d8eb77540b0d5866ec1c3da52aa8270e056ebf4548ea9852eaea072b2eb14c50759872a9de11d15b976ed12b6ab03297e131c81bd969a0de8bf347acaddaa4ac7a15e1d2908ef04061341e8f892f4b885df0557bb7a6d5a58433c9848571739e460b440a8f9ee9897aca6b83609e18ed13c9f3829d9735a845234db01690e90843072571a678158b64e6e45efed05baeaae0", 0xe8, 0x8}, {&(0x7f0000001900)="a144ad57c3e8196d440920cdee0b8c7cd0aff78028b3dc376f0ab358ab98d5ef6b9ac4ea045c16167a", 0x29, 0x7}, {&(0x7f0000001940)="59386e8ed6b8379b2997428d13c8eab1dae2f5a3edb680bd78ab2d228ec4c5532be3541f634260e5086f297292fb0a6745236f504701a8775b957a361e122529d928b29eab8574768ff3009703d143d56aa3c129d18e7149ba689662c0379cc784748bb3d55afa9d870fb9dd825240c6cee8149083c6bcd6175f9a14d71c07ef1944bc79a983fddc5f0cd53f491a5583a0410e64", 0x94, 0xfffffffffffff001}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)="4acc8ca06c0343dc810c3ca5870df884ba7d5a0f12fe4ea4a8c87eb80251ecca8ffdc2b677f4f82b7cad507b1e0100d5f99662183edc4b302fb8f74df32ad0387ddcb7c98c7a9d0c7e73d335819ef4e24e6777104e16c0454af19d91bd0d29fff859d890e49e6606543c88d8953ec8640b292671a2d002b15ad7858af640a306bc34ddc5ad5de1b6cdf72b299b73cf98e4abe03ca123e30ff3b7c06e8f48ef501165dc40ac1d5a93df1b", 0xaa, 0x7}], 0x4, &(0x7f0000001d40)={[{@check_strict='check=strict'}, {@map_off='map=off'}, {@gid={'gid', 0x3d, r11}}], [{@obj_user={'obj_user', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@hash='hash'}, {@dont_hash='dont_hash'}, {@fowner_gt={'fowner>', 0xee01}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_type={'obj_type'}}, {@obj_user={'obj_user', 0x3d, 'SEG6\x00'}}, {@euid_gt={'euid>', r16}}]}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @empty}, {0x0, @random="d407677d5752"}, 0x0, {0x2, 0x4e21, @remote}, 'veth0_to_team\x00'}) r17 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x80800, 0x0) write$P9_RLOCK(r17, &(0x7f0000000380)={0x8, 0x35, 0x1}, 0x8) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01140000000100f2ff070005000000000008000300"/30], 0x24}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6ba137bd7000fedbdf250100000008001584000100ff02000000000000000000000000000114000100000000000000000000ef0000000000000002000000a3000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)=0x1, 0x4) 03:45:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xb00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:37 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm, @mss={0x2, 0x1}, @sack_perm], 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000400)={0x4, 0x70, 0x6, 0x7f, 0x4, 0x0, 0x0, 0x7, 0x18, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000003c0), 0xb}, 0x2642, 0x5, 0xca6, 0x6, 0x1d, 0x4, 0x81}) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') r5 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffd3ad, 0x80200) r6 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r6) ptrace$setopts(0x4206, r6, 0x0, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000480)={0x2, r6}) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000880)={0x0, 0x0}) r9 = getegid() fcntl$getownex(r7, 0x10, &(0x7f0000000a80)={0x0, 0x0}) lstat(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) lstat(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r13, 0x0, r14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="461b173c1daf6fd3514b07e58b123ee40c55eb9586082bf98076ed45f0a0344a8b3366c25b10c962569d34684addf1078c3af1132a862f36a4917c2b837f86361a1bfcf81b8859a44fa1a3aaecc79b2c8c0537df9ff0d2322077077298d6ad2bb54b8200", 0x64}, {&(0x7f00000005c0)="2919da6b1a29b57e129b7a4a60afbb", 0xf}, {0x0}, {&(0x7f0000000700)="8e01364aa70818cbf626a37fcfa2270baff3d5e2cb6b0bada6c69f072980e53f814ae0e21a482618037c48c5912a9f3f77946116a4ed98", 0x37}], 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c001200000000000100dd0002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4}, 0x6010) r15 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r15, &(0x7f0000000480), 0x10000000000001e2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000001c00)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000001d00)=0xe8) syz_mount_image$iso9660(&(0x7f0000000500)='iso9660\x00', &(0x7f0000000540)='./file0\x00', 0xffff, 0x9, &(0x7f0000001b00)=[{&(0x7f0000000600)="cce9a5b332253035248733bff28ac66d546f2e1d9be70b180bb9e0d76f32c0e5ea21f96bfb95d28c8dfadf28f13629a0089658977e0f03534c69b6e90e26800f4b4875b4fc4d603e11832234b633a0", 0x4f, 0x3}, {&(0x7f0000000680)="8322bf464120479b51bbe6f820d9507750b9bbf33008fbbc07bcefb4cad81bf67510c4ac3bc061926e8e378a7c39b8cdc14ba874b372dd874397cc7879dd24090225", 0x42, 0x1000}, {&(0x7f0000000700)="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", 0x1000, 0x7}, {&(0x7f0000001700)="6e7d868383a7e64a3ab4fad61c784c03749a898488a6a9ad4c12774733a3416f6a377a436419158a3e362ed2f8fdb367108e5075ccfba8592fe4f7f46cb98c65433e0defd55c9df60916169f2a66b186207097eef73a6f37ab85805c6274a4f2f892713903ac596bcd69901b8f61b76fff835b6b513b5be086b9ba90064e8016f1496a96c003307a4aeb814bb72b3612488e560945d20c50636f73c06bacaf01f1f602858a1dcb2f712f08069bbd14ac740131f6f82324a2e1425e4670ba8533b7a82ea027b0f2abd48dfdd96042efe96f25aaa7009cb64f3b76641a7f3b52f108a4ff4547536b5683c6", 0xea, 0x1}, {&(0x7f0000001800)="4f7b4b20f8a84e68ee80ab31e63c80b9f2fb978bdc7247e9ae9a9e58ea58e889a09ab95b9c099e1e49b528d2ae71d277059f4addb6018e11eacf091e3c723ef2710e8fe324374fb01aa07b8b5dcb05e8d07010137e79d8eb77540b0d5866ec1c3da52aa8270e056ebf4548ea9852eaea072b2eb14c50759872a9de11d15b976ed12b6ab03297e131c81bd969a0de8bf347acaddaa4ac7a15e1d2908ef04061341e8f892f4b885df0557bb7a6d5a58433c9848571739e460b440a8f9ee9897aca6b83609e18ed13c9f3829d9735a845234db01690e90843072571a678158b64e6e45efed05baeaae0", 0xe8, 0x8}, {&(0x7f0000001900)="a144ad57c3e8196d440920cdee0b8c7cd0aff78028b3dc376f0ab358ab98d5ef6b9ac4ea045c16167a", 0x29, 0x7}, {&(0x7f0000001940)="59386e8ed6b8379b2997428d13c8eab1dae2f5a3edb680bd78ab2d228ec4c5532be3541f634260e5086f297292fb0a6745236f504701a8775b957a361e122529d928b29eab8574768ff3009703d143d56aa3c129d18e7149ba689662c0379cc784748bb3d55afa9d870fb9dd825240c6cee8149083c6bcd6175f9a14d71c07ef1944bc79a983fddc5f0cd53f491a5583a0410e64", 0x94, 0xfffffffffffff001}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)="4acc8ca06c0343dc810c3ca5870df884ba7d5a0f12fe4ea4a8c87eb80251ecca8ffdc2b677f4f82b7cad507b1e0100d5f99662183edc4b302fb8f74df32ad0387ddcb7c98c7a9d0c7e73d335819ef4e24e6777104e16c0454af19d91bd0d29fff859d890e49e6606543c88d8953ec8640b292671a2d002b15ad7858af640a306bc34ddc5ad5de1b6cdf72b299b73cf98e4abe03ca123e30ff3b7c06e8f48ef501165dc40ac1d5a93df1b", 0xaa, 0x7}], 0x4, &(0x7f0000001d40)={[{@check_strict='check=strict'}, {@map_off='map=off'}, {@gid={'gid', 0x3d, r11}}], [{@obj_user={'obj_user', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@hash='hash'}, {@dont_hash='dont_hash'}, {@fowner_gt={'fowner>', 0xee01}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_type={'obj_type'}}, {@obj_user={'obj_user', 0x3d, 'SEG6\x00'}}, {@euid_gt={'euid>', r16}}]}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @empty}, {0x0, @random="d407677d5752"}, 0x0, {0x2, 0x4e21, @remote}, 'veth0_to_team\x00'}) r17 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x80800, 0x0) write$P9_RLOCK(r17, &(0x7f0000000380)={0x8, 0x35, 0x1}, 0x8) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01140000000100f2ff070005000000000008000300"/30], 0x24}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6ba137bd7000fedbdf250100000008001584000100ff02000000000000000000000000000114000100000000000000000000ef0000000000000002000000a3000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)=0x1, 0x4) [ 3026.785082][ C0] net_ratelimit: 23 callbacks suppressed [ 3026.785099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.785106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.802164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.807893][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.813620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.819352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.825157][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.830875][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3026.836614][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3026.842324][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:43 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000040)="609a154ad544c9bacb27574f95bedb12adcb9aa23d96f49ee76e5749e77261671cd1ee4bc93c246c36e9306baa2e1eec93fffbd5968b7f02004efad077984995f09832d32bad7f35b514350a034afd1e81d3e84b54afba8f9094c6b4bf0c80bc4257fcbbffa6e8e5f76735eafb2340d4f5357b1f8b4bc2679d1750eebbf9", 0x7e) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) close(0xffffffffffffffff) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:43 executing program 3: ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000040)={0x7}) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x1640, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x13, r0, 0x3) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:45:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x1, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000140)={r1, 0x101}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) bind$rose(r4, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}, 0x40) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_LSEEK(r4, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x8}}, 0x18) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r2, 0x0) 03:45:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x435000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xd00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:44 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="fcc6195f0ff143c41bb1a3e648a330bbcff116416d7dc5227373f24b6b5c3cc87da2b082c8af793d2c85405c5263174df6e3bcf959ec92329c8e093715d3ed54f53e377733536288c1ff2cdc33a4d9f71bc9e5bb0d8c8b9382caca55378193ecc9d1e993e1531a9f33af45dcb441cedf7d12d09e49825e55139bdc89569ba84104e7288ebeafbff523d89d0c377af0da503c751cb47fa1c9d9c278736f65b090d6a99457", 0xa4}, {&(0x7f0000000140)="4b8cfb9c4bdfe962f750e60a0de651d843a6bc6d4d3fee7c900463594e0c478e681b9f9c2d51c0d8e5b1cbc2871ce3e8f88ee0b01a8abeb4f9203797eb60ee227fd23d839b30eaabf371df2fa7d167cce2a2b13215a0b4e5daef", 0x5a}], 0x2, &(0x7f0000000600)=[{0x1010, 0x103, 0xe859ffc, "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"}, {0x100, 0x114, 0xdff4, "28767329cca96dfd0f17af358a15ba081c274b78926cdebde509b287220f4b6a52a733afff131d09c22720bf27f29c334020e9026fe5445f90da2b4fac00b38c92facd409be2b4b681b10780ca9977097d591d020976e008b6a4c711c4dff8769a1292f34cfa556df55f57e742ae7bfd62d8d3a32bd818056c62434ab2c091ec2ab8511c99e1c5e7c75e1342a47d11b6e8797c8c97ae5a2869333031e37e2aa02234cd3829e669ae378f5f8057d9cba2ce6ab9061544976ebfe683978d057d42c113e896dac055dffb9e66fbe2e5fa318f2c773ed3698be5b83058089dffe9e5692bf7fc17558c5265f143b2ce8f36"}, {0x98, 0x107, 0x6, "3c3f585b796f92f42369d506c69d97cefa49a23034dc4fade00fd3364511beeceeef02e5a1572c660a5aba7ea71d280cc8945a5b7cea846181e4764edf746d9f01742cfd5d559f7001b07cd57fa4b39975c3af84dfe0f66cf3d8882623aa32d04cb9ca26cf91223cc9c6dbd667cc52a42d691ff1634643762a0179d86903331c5a6f8cdf68fb19"}, {0xf0, 0x110, 0x0, "70df39083b6a12db5acb1929a37defb7e35947face87228e49f3e10f85809d501ebc2aed2381a89dd08e5b46270ac8fe25f5f8c39653f70890802477e4ae3853c4bdb2f4c8130ae4daf3d401511aee1ee1c7cd3a6c25fb31e0fc3f11ea0b13d1d463bb3ad55853ace40766c426d4b01517f358e19622ae3189cad9d2595ae14482f35720d54fc1515716aea0f135fd41170bd4b6a5130bd3a0407d7b897805741276a1991191176102a037bfc921c7a1e86d4daf7a4edfb47f6e063aec7bdc3f49ec880644b412cc0b228e11f999b587c9658169cf086ce01ca5319420ba"}], 0x1298}}], 0x1, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) [ 3033.025080][ C0] net_ratelimit: 24 callbacks suppressed [ 3033.025088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.025108][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.030790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.047957][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.053740][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.059468][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.065198][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.070922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3033.076684][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3033.082402][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x9f120000}, 0x0) 03:45:51 executing program 0: write(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) lstat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x1800000000000060, 0xe80, 0xf0ffff, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff, 0x806}, 0x28) 03:45:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:51 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x436000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:51 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="fcc6195f0ff143c41bb1a3e648a330bbcff116416d7dc5227373f24b6b5c3cc87da2b082c8af793d2c85405c5263174df6e3bcf959ec92329c8e093715d3ed54f53e377733536288c1ff2cdc33a4d9f71bc9e5bb0d8c8b9382caca55378193ecc9d1e993e1531a9f33af45dcb441cedf7d12d09e49825e55139bdc89569ba84104e7288ebeafbff523d89d0c377af0da503c751cb47fa1c9d9c278736f65b090d6a99457", 0xa4}, {&(0x7f0000000140)="4b8cfb9c4bdfe962f750e60a0de651d843a6bc6d4d3fee7c900463594e0c478e681b9f9c2d51c0d8e5b1cbc2871ce3e8f88ee0b01a8abeb4f9203797eb60ee227fd23d839b30eaabf371df2fa7d167cce2a2b13215a0b4e5daef", 0x5a}], 0x2, &(0x7f0000000600)=[{0x1010, 0x103, 0xe859ffc, "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"}, {0x100, 0x114, 0xdff4, "28767329cca96dfd0f17af358a15ba081c274b78926cdebde509b287220f4b6a52a733afff131d09c22720bf27f29c334020e9026fe5445f90da2b4fac00b38c92facd409be2b4b681b10780ca9977097d591d020976e008b6a4c711c4dff8769a1292f34cfa556df55f57e742ae7bfd62d8d3a32bd818056c62434ab2c091ec2ab8511c99e1c5e7c75e1342a47d11b6e8797c8c97ae5a2869333031e37e2aa02234cd3829e669ae378f5f8057d9cba2ce6ab9061544976ebfe683978d057d42c113e896dac055dffb9e66fbe2e5fa318f2c773ed3698be5b83058089dffe9e5692bf7fc17558c5265f143b2ce8f36"}, {0x98, 0x107, 0x6, "3c3f585b796f92f42369d506c69d97cefa49a23034dc4fade00fd3364511beeceeef02e5a1572c660a5aba7ea71d280cc8945a5b7cea846181e4764edf746d9f01742cfd5d559f7001b07cd57fa4b39975c3af84dfe0f66cf3d8882623aa32d04cb9ca26cf91223cc9c6dbd667cc52a42d691ff1634643762a0179d86903331c5a6f8cdf68fb19"}, {0xf0, 0x110, 0x0, "70df39083b6a12db5acb1929a37defb7e35947face87228e49f3e10f85809d501ebc2aed2381a89dd08e5b46270ac8fe25f5f8c39653f70890802477e4ae3853c4bdb2f4c8130ae4daf3d401511aee1ee1c7cd3a6c25fb31e0fc3f11ea0b13d1d463bb3ad55853ace40766c426d4b01517f358e19622ae3189cad9d2595ae14482f35720d54fc1515716aea0f135fd41170bd4b6a5130bd3a0407d7b897805741276a1991191176102a037bfc921c7a1e86d4daf7a4edfb47f6e063aec7bdc3f49ec880644b412cc0b228e11f999b587c9658169cf086ce01ca5319420ba"}], 0x1298}}], 0x1, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) [ 3039.265082][ C0] net_ratelimit: 24 callbacks suppressed [ 3039.265098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.276678][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.283066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.289770][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.296146][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.303095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.309438][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.316171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3039.322490][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3039.329029][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:57 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000040)="609a154ad544c9bacb27574f95bedb12adcb9aa23d96f49ee76e5749e77261671cd1ee4bc93c246c36e9306baa2e1eec93fffbd5968b7f02004efad077984995f09832d32bad7f35b514350a034afd1e81d3e84b54afba8f9094c6b4bf0c80bc4257fcbbffa6e8e5f76735eafb2340d4f5357b1f8b4bc2679d1750eebbf9", 0x7e) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) close(0xffffffffffffffff) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:45:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:57 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="fcc6195f0ff143c41bb1a3e648a330bbcff116416d7dc5227373f24b6b5c3cc87da2b082c8af793d2c85405c5263174df6e3bcf959ec92329c8e093715d3ed54f53e377733536288c1ff2cdc33a4d9f71bc9e5bb0d8c8b9382caca55378193ecc9d1e993e1531a9f33af45dcb441cedf7d12d09e49825e55139bdc89569ba84104e7288ebeafbff523d89d0c377af0da503c751cb47fa1c9d9c278736f65b090d6a99457", 0xa4}, {&(0x7f0000000140)="4b8cfb9c4bdfe962f750e60a0de651d843a6bc6d4d3fee7c900463594e0c478e681b9f9c2d51c0d8e5b1cbc2871ce3e8f88ee0b01a8abeb4f9203797eb60ee227fd23d839b30eaabf371df2fa7d167cce2a2b13215a0b4e5daef", 0x5a}], 0x2, &(0x7f0000000600)=[{0x1010, 0x103, 0xe859ffc, "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"}, {0x100, 0x114, 0xdff4, "28767329cca96dfd0f17af358a15ba081c274b78926cdebde509b287220f4b6a52a733afff131d09c22720bf27f29c334020e9026fe5445f90da2b4fac00b38c92facd409be2b4b681b10780ca9977097d591d020976e008b6a4c711c4dff8769a1292f34cfa556df55f57e742ae7bfd62d8d3a32bd818056c62434ab2c091ec2ab8511c99e1c5e7c75e1342a47d11b6e8797c8c97ae5a2869333031e37e2aa02234cd3829e669ae378f5f8057d9cba2ce6ab9061544976ebfe683978d057d42c113e896dac055dffb9e66fbe2e5fa318f2c773ed3698be5b83058089dffe9e5692bf7fc17558c5265f143b2ce8f36"}, {0x98, 0x107, 0x6, "3c3f585b796f92f42369d506c69d97cefa49a23034dc4fade00fd3364511beeceeef02e5a1572c660a5aba7ea71d280cc8945a5b7cea846181e4764edf746d9f01742cfd5d559f7001b07cd57fa4b39975c3af84dfe0f66cf3d8882623aa32d04cb9ca26cf91223cc9c6dbd667cc52a42d691ff1634643762a0179d86903331c5a6f8cdf68fb19"}, {0xf0, 0x110, 0x0, "70df39083b6a12db5acb1929a37defb7e35947face87228e49f3e10f85809d501ebc2aed2381a89dd08e5b46270ac8fe25f5f8c39653f70890802477e4ae3853c4bdb2f4c8130ae4daf3d401511aee1ee1c7cd3a6c25fb31e0fc3f11ea0b13d1d463bb3ad55853ace40766c426d4b01517f358e19622ae3189cad9d2595ae14482f35720d54fc1515716aea0f135fd41170bd4b6a5130bd3a0407d7b897805741276a1991191176102a037bfc921c7a1e86d4daf7a4edfb47f6e063aec7bdc3f49ec880644b412cc0b228e11f999b587c9658169cf086ce01ca5319420ba"}], 0x1298}}], 0x1, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) 03:45:57 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x437000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:45:57 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0xb81) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000340)=[{&(0x7f0000000140)="b80a70e960ee03b353f45d4ac2695cfc84aa89bdeb68a79eae73dc5b1ff0b4ee503e413ccebeb8aaf4ae01d42b94cb652266562f6dbc261aaf8a5b74ac511240a6514d2f982499afa91a8c9a101ce4e3e56b498fe90bcbb15472c0216ed2d3f60b2f402f73f9c7971d31833f600d8a301b415d6c3e190c303e912e5caa7ff52a245225c7fbef4b9417cb41dce2e325c640f47df45d7d729016d9c59c650c44263eaafc0b035ac61181a66f70ea036b81fd1ac414cbaee17df5793a37a5cf708b56b8b3869c6fb275d74b945a", 0xcc, 0x8}, {&(0x7f0000000240)="6313fe59a9e604811613276fb8b99bc38967fc246d77d9b22929034fab8b5e135f1b3db82e99adf505c528f549718e54630f5026237b1a620dce068b7a4e519fd160a8a505c88df447403b193b3acf42603b61519d56ec115ee40f9ded8f26e39110204b01b3abbc749d1d4fbecb5180a866f525938c9cfaebf1d0dd8a16dd0e8ff82059209ec4468d3b9bfad0be980cf64f15466c38bae1fc6bd608564e6ff509b864050653e268d302cbb13f0f402d1121584c6b2a418ad9bf938ff23226b419df83e61aeeb7af5117b88ed766cc9ca6", 0xd1, 0x7ff}], 0x100200, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) 03:45:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x1000000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:45:57 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2000000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3045.505152][ C1] net_ratelimit: 24 callbacks suppressed [ 3045.505160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3045.505187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3045.510956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3045.516715][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3045.533875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3045.539625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3045.545359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3045.551108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3045.556968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3045.562722][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:46:01 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0xfbb4f9c0b2284690) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000004c0)={0x0, 0x7fff}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r2, r3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r8, &(0x7f0000000480), 0x10000000000001e2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="190000006b9f3e3ee18984b14b0817b00068e408fb69695bf11dfafb28cad08854a89b5f0c25be270b6431183790defc008ed5e73301289a8ec37be7c3a4d29250f94ab71a1892eaa328e741f98fdab33dc3641d87426a", @ANYRES16=r9, @ANYBLOB="010200000000000000000a0000000c0003000800010000000000"], 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6800010}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x5, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r9, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x10004000}, 0x4040) dup2(r7, r6) r10 = perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) r12 = accept(r2, &(0x7f00000001c0)=@rc, &(0x7f0000000240)=0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r11, 0x100}, &(0x7f0000000340)=0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000700)={r11, @in={{0x2, 0x4e22, @remote}}, 0x1000, 0xcc9f}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000640)={r11, 0x7e3ae58e}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r11, 0x401, 0x7}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x4, 0xfffffff7, 0x5, r13}, &(0x7f0000000180)=0x10) preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) mmap$usbfs(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x204, 0x11, r0, 0x4000000000) 03:46:01 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x438000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:01 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) 03:46:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4800000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3051.745095][ C0] net_ratelimit: 24 callbacks suppressed [ 3051.745104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.745112][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.762210][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.767987][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.773736][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.779519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.785280][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.790996][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3051.796764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3051.802531][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.985084][ C0] net_ratelimit: 23 callbacks suppressed [ 3057.985093][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.995075][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3057.996502][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.002184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.007913][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.019359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.025133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.030897][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3058.036657][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3058.042919][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:10 executing program 2: perf_event_open(&(0x7f0000000580)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x97}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1f, 0x40000) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000180)=0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000140)={0x4, 0x4}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/162, 0xa2}], 0x4) 03:46:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x4c00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:10 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x7f}, &(0x7f00000001c0)=0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup3(r7, r8, 0x0) dup2(r10, r9) r11 = perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x1000, 0x480400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = accept(r13, &(0x7f00000002c0)=@rc, &(0x7f0000000240)=0xfffffffffffffcbd) getsockopt$inet_sctp6_SCTP_MAXSEG(r14, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r12, 0x100}, &(0x7f0000000340)=0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000000700)={r12, @in={{0x2, 0x4e22, @remote}}, 0x1000, 0xcc9f}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000100)={r12, 0x7e3ae58a}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000200)={r12, 0x83f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000280)={r15, 0x4}, 0x8) openat$userio(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:46:10 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9c, 0x16002) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000080)) 03:46:10 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x439000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x5110000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:10 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3064.225158][ C0] net_ratelimit: 26 callbacks suppressed [ 3064.225167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.235048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.236561][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.242244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.247970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.259428][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.265162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.270875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3064.276638][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3064.282350][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:46:17 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6000000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:17 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x43a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:17 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:46:17 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3070.465066][ C0] net_ratelimit: 25 callbacks suppressed [ 3070.465090][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3070.470744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3070.482260][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3070.487983][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3070.493730][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3070.499447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3070.505170][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3070.510881][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3070.516656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3070.522412][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:24 executing program 2: clone3(&(0x7f0000000280)={0x40000200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, 0x1e, 0x0, &(0x7f0000000100)=""/168, 0xa8, &(0x7f00000001c0)=""/134}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:46:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6558000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:24 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f00000004c0)="4c73e48a522e29d96ee00568db661860ba054ec6c865aa64f34dcea6b6482e8d30cd16cd362c62f280164eb7821c0361aa234de924f7f85a078ce3675f462e8a28b8f15a47d5b4ff960d855ac3d02321", 0x50, 0x4c299c5aa6b15cd0, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x48001) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) semget(0x3, 0x4, 0x502) 03:46:24 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:46:24 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x43b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6800000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x6c00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3076.705066][ C1] net_ratelimit: 24 callbacks suppressed [ 3076.705100][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3076.710765][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3076.710793][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3076.716529][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3076.733657][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3076.739395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3076.745140][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3076.750882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3076.756644][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3076.762364][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:46:30 executing program 0: clone3(&(0x7f0000000280)={0x40000200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, 0x1e, 0x0, &(0x7f0000000100)=""/168, 0xa8, &(0x7f00000001c0)=""/134}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:46:30 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) 03:46:30 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x43c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:30 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7400000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3078.420794][T18359] IPVS: ftp: loaded support on port[0] = 21 [ 3082.945069][ C0] net_ratelimit: 24 callbacks suppressed [ 3082.945077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3082.945098][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3082.950759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3082.967898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3082.973644][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3082.979472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3082.985217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3082.990953][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3082.996688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3083.002414][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:37 executing program 2: clone3(&(0x7f0000000280)={0x40000200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, 0x1e, 0x0, &(0x7f0000000100)=""/168, 0xa8, &(0x7f00000001c0)=""/134}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:46:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x7a00000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:37 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) 03:46:37 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x43d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:37 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) 03:46:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x8100000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:37 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) [ 3089.185144][ C1] net_ratelimit: 25 callbacks suppressed [ 3089.185152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.185181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.190841][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.196574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.213714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.219478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.225191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.230901][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.236657][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.242385][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 03:46:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x88a8ffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:43 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) 03:46:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x43e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:43 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3095.425135][ C0] net_ratelimit: 25 callbacks suppressed [ 3095.425151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.425168][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.430856][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.448046][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.453754][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.459478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.465200][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.470909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.476659][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3095.482388][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:51 executing program 2: clone3(&(0x7f0000000280)={0x40000200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, 0x1e, 0x0, &(0x7f0000000100)=""/168, 0xa8, &(0x7f00000001c0)=""/134}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:46:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x9effffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:51 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffffffffffffff01, 0x301000) 03:46:51 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:46:51 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x43f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:51 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc000000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:51 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3101.665060][ C0] net_ratelimit: 25 callbacks suppressed [ 3101.665068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.665084][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3101.670750][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3101.687862][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.693607][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3101.699409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.705135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3101.710885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.716673][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3101.722412][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x10000000000}, 0x0) 03:46:56 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:46:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xc00e000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:46:56 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x440000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:46:56 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3107.905085][ C0] net_ratelimit: 23 callbacks suppressed [ 3107.905110][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3107.910771][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3107.910801][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3107.927951][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3107.933686][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3107.939456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3107.945179][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3107.950950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3107.956693][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3107.962508][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:02 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xe03f030000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:47:02 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:02 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:02 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x441000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:02 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:02 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xeffdffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3114.145167][ C0] net_ratelimit: 24 callbacks suppressed [ 3114.145190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.150856][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.162283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.168036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.173799][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.179543][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.185295][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.191037][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3114.196778][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3114.202522][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 03:47:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$eventfd(r0, &(0x7f0000000080), 0xff97) 03:47:10 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:10 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x442000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xf0ffffff00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3120.385081][ C0] net_ratelimit: 23 callbacks suppressed [ 3120.385091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.385109][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.390781][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.407940][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.413648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.419404][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.425143][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.430867][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.436761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.442510][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:15 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:15 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:15 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xff03000000000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:47:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/88, 0x58}], 0x1) 03:47:15 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x443000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:15 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:15 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xffffff7f00000000, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3123.591042][T18483] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 3126.625145][ C0] net_ratelimit: 24 callbacks suppressed [ 3126.625154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.625192][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.630843][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.636548][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.642290][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.659418][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.665242][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.670975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.676746][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.682467][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:47:23 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x2}], 0x492492492492805, 0x0) 03:47:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/88, 0x58}], 0x1) 03:47:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x444000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3131.280979][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3131.328307][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:25 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:25 executing program 0: socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) dup2(r1, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) 03:47:25 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x445000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:25 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x3}], 0x492492492492805, 0x0) [ 3132.865067][ C0] net_ratelimit: 26 callbacks suppressed [ 3132.865077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.865095][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3132.870764][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3132.887932][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.893688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3132.899473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.905218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3132.910971][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.911838][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3132.916875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3132.931840][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3132.968086][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:25 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x446000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3139.105140][ C1] net_ratelimit: 24 callbacks suppressed [ 3139.105149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3139.105168][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.110833][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.116547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3139.133798][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.139541][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3139.145424][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.151167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3139.156938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3139.162692][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:47:31 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:31 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4}], 0x492492492492805, 0x0) 03:47:31 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x447000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:31 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) process_vm_writev(0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) name_to_handle_at(r1, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x1000) [ 3139.653233][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3139.754081][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3145.345181][ C0] net_ratelimit: 25 callbacks suppressed [ 3145.345191][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3145.355056][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3145.356571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3145.362364][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3145.368088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3145.379580][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3145.385399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3145.393042][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3145.398800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3145.404538][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/10, 0x2}], 0x1000000000000381) 03:47:38 executing program 3: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:38 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 03:47:38 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x448000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:38 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x5}], 0x492492492492805, 0x0) [ 3146.231135][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:38 executing program 3: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3146.296035][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:38 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x449000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 03:47:39 executing program 3: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:39 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6}], 0x492492492492805, 0x0) 03:47:39 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x44a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:39 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3146.897714][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3146.960256][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3151.585110][ C0] net_ratelimit: 25 callbacks suppressed [ 3151.585119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.595073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.596695][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3151.602387][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3151.608140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.619745][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3151.625606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.631324][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3151.637068][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3151.642810][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/170, 0xaa}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) socket$inet(0x2, 0x0, 0x84) 03:47:50 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:50 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x44b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7}], 0x492492492492805, 0x0) 03:47:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback}, 0x20) 03:47:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 3157.808432][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3157.825041][ C0] net_ratelimit: 26 callbacks suppressed [ 3157.825049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.835079][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.836463][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.842179][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:47:50 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3157.847933][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.859366][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.865157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.870890][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.876676][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.883843][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:47:50 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev, 0x63}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) [ 3157.953382][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:50 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:50 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x44c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x8}], 0x492492492492805, 0x0) 03:47:50 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000f40)=[{{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1}}], 0x1, 0x0, 0x0) [ 3158.146090][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3158.221383][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3164.065088][ C0] net_ratelimit: 25 callbacks suppressed [ 3164.065114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.070741][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.070768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.087894][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.093645][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.099382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.105090][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.110834][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3164.116542][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3164.122283][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:47:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000001c0)=0x32, 0x118) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0xffd2}], 0x1}}], 0x469, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:47:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:59 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000077000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="000007000000000003000000080001006270660050000200080004000000000004000500400002003c0001000000ff03008af4a98fd704b34bf14b726a11becf04000000000400000000000000e62900000000000000001100000000000000000000000000000000000000000003e8a44d00006b8af1fa454921483b79b0ec762852a47e69e60c061f9c871cc395fa86f369a04912c9e69817f049ec6df0e44a2b27bc64af847665f32224e4d778548bc7cba4aad65985da75ad8f3dcb3ee4b78dd97dc5e138da76d28c07639b67c57cc5df12fe95535049"], 0x7c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x25e, 0x0) 03:47:59 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x44d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:59 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x9}], 0x492492492492805, 0x0) 03:47:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 3167.127045][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3167.177610][T18642] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 03:47:59 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3167.233588][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:47:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:47:59 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x44e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:59 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x441000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:47:59 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xa}], 0x492492492492805, 0x0) [ 3167.444686][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3167.489297][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3170.305090][ C0] net_ratelimit: 23 callbacks suppressed [ 3170.305130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3170.310768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3170.317004][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3170.322691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3170.334113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3170.339870][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3170.345671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3170.351411][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3170.357172][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3170.362944][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:06 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) setuid(r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14}}], 0x18}, 0x0) 03:48:06 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:06 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xb}], 0x492492492492805, 0x0) 03:48:06 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x200100, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7a) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000040)={0x341, 0x1, "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"}) 03:48:06 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x44f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 3174.494053][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:06 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:06 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc}], 0x492492492492805, 0x0) 03:48:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) 03:48:06 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x450000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:06 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:06 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) [ 3174.684452][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3176.545118][ C0] net_ratelimit: 26 callbacks suppressed [ 3176.545128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3176.545145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3176.550815][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3176.567970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3176.573692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3176.579467][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3176.585290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3176.591059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3176.596829][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3176.602657][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3182.785082][ C1] net_ratelimit: 24 callbacks suppressed [ 3182.785090][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3182.785141][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.790822][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.796528][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3182.813611][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.819386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3182.825155][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.830882][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3182.836644][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3182.842380][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:16 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x5, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 03:48:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xd}], 0x492492492492805, 0x0) 03:48:16 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:16 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x451000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 03:48:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:48:16 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3183.950746][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:16 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3184.043195][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:16 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x452000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe}], 0x492492492492805, 0x0) 03:48:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000100)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) 03:48:16 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3184.273701][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3184.380760][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3189.025062][ C1] net_ratelimit: 24 callbacks suppressed [ 3189.025071][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.025088][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.030753][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.036485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.053627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.059439][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.065177][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.070896][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3189.076649][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3189.082518][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r0}) 03:48:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xfffffffffffffc3d}, 0xfffffffd) 03:48:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x453000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:22 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 3190.200398][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3190.281432][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:48:23 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x10, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x9f12000000000000}, 0x0) 03:48:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:48:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x454000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x10}], 0x492492492492805, 0x0) 03:48:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x48}], 0x492492492492805, 0x0) 03:48:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4c}], 0x492492492492805, 0x0) [ 3195.265076][ C0] net_ratelimit: 24 callbacks suppressed [ 3195.265085][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.265121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.270776][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.276470][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.282187][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.299343][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.305104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.310837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3195.316602][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3195.322440][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:31 executing program 2: 03:48:31 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x10, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:31 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x455000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:31 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x60}], 0x492492492492805, 0x0) 03:48:31 executing program 0: 03:48:31 executing program 0: [ 3201.505103][ C1] net_ratelimit: 25 callbacks suppressed [ 3201.505139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3201.510768][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3201.516517][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3201.522198][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3201.527913][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3201.539295][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3201.545057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3201.550823][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3201.556588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3201.562452][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:48:36 executing program 0: 03:48:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:48:36 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x68}], 0x492492492492805, 0x0) 03:48:36 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x10, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:36 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x456000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:36 executing program 0: [ 3207.745066][ C0] net_ratelimit: 24 callbacks suppressed [ 3207.745082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3207.745088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3207.762215][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3207.768104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3207.773848][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3207.779651][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3207.785405][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3207.791136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3207.796897][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3207.802643][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000000)=0x2, 0x4) 03:48:42 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:42 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6c}], 0x492492492492805, 0x0) 03:48:42 executing program 0: 03:48:42 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x457000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000cc0)="2e00000010008108040f80ecdb4cb9c00a480e1813000000ff050005bf008600002000000000000000ecff6b7e42", 0x2e}], 0x1}, 0x0) [ 3209.923414][T18820] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3213.985176][ C0] net_ratelimit: 24 callbacks suppressed [ 3213.985184][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3213.985203][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3213.990868][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.008153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3214.013891][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.019635][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3214.025398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.031117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3214.036851][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3214.042605][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:48:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x74}], 0x492492492492805, 0x0) 03:48:50 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:50 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x458000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000cc0)="2e00000010008108040f80ecdb4cb9c00a480e1813000000ff050005bf008600002000000000000000ecff6b7e42", 0x2e}], 0x1}, 0x0) 03:48:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7a}], 0x492492492492805, 0x0) [ 3217.998808][T18828] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3220.225077][ C1] net_ratelimit: 25 callbacks suppressed [ 3220.225087][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3220.225095][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3220.225129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3220.230786][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3220.236506][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3220.259343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3220.265175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3220.270979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3220.276743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3220.282484][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:48:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x20002) r0 = socket$inet6(0xa, 0x803, 0x200000000000007) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'}) 03:48:53 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:48:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3c, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:48:53 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc0}], 0x492492492492805, 0x0) 03:48:53 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x459000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:48:53 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x300}], 0x492492492492805, 0x0) [ 3226.465086][ C0] net_ratelimit: 24 callbacks suppressed [ 3226.465108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3226.465125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3226.470799][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3226.488085][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3226.493823][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3226.499593][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3226.505352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3226.511071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3226.516815][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3226.522551][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 03:49:03 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) dup3(r0, r1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 03:49:03 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:49:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x500}], 0x492492492492805, 0x0) 03:49:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x45a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:03 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x454000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3232.705072][ C0] net_ratelimit: 25 callbacks suppressed [ 3232.705078][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3232.715069][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3232.716507][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3232.722181][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3232.727920][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3232.739463][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3232.745235][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:05 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:49:05 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:49:05 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x600}], 0x492492492492805, 0x0) 03:49:05 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x45b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:05 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) [ 3232.750974][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3232.756738][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3232.762477][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:49:05 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x700}], 0x492492492492805, 0x0) [ 3238.945096][ C0] net_ratelimit: 25 callbacks suppressed [ 3238.945120][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3238.950761][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3238.962204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3238.967963][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3238.973691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3238.979421][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3238.985144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3238.990866][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3238.996595][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3239.002344][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) 03:49:14 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:49:14 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:49:14 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x45c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x900}], 0x492492492492805, 0x0) 03:49:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xa00}], 0x492492492492805, 0x0) 03:49:14 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/170, 0xaa}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 03:49:16 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:49:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000240)=""/204, 0xcc, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x4fe7196, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x7fffffff}, 0x10) connect(0xffffffffffffffff, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) recvfrom$inet(r1, 0x0, 0xfffffeb2, 0x0, 0x0, 0x800e00545) shutdown(r1, 0x0) 03:49:16 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x45d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xb00}], 0x492492492492805, 0x0) 03:49:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) [ 3245.185095][ C1] net_ratelimit: 24 callbacks suppressed [ 3245.185119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.190780][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.196509][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.202190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.207913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.219304][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.225041][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.230781][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3245.236512][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3245.242249][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:49:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00}], 0x492492492492805, 0x0) 03:49:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002e80)={0x18, 0x36, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 03:49:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x45e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000240)) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r2, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mmap(&(0x7f0000009000/0xf000)=nil, 0xf000, 0x380010a, 0x10, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) 03:49:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, 0x0}, 0x20) 03:49:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xd00}], 0x492492492492805, 0x0) [ 3251.425112][ C0] net_ratelimit: 24 callbacks suppressed [ 3251.425136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3251.430806][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3251.442239][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3251.447961][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3251.453689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3251.459407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3251.465144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3251.470878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3251.476604][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3251.482319][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:27 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x0, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x2b}) 03:49:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=@can_delroute={0x14, 0x19, 0x501}, 0x14}}, 0x0) 03:49:27 executing program 0: 03:49:27 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x45f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe00}], 0x492492492492805, 0x0) [ 3257.665057][ C1] net_ratelimit: 23 callbacks suppressed [ 3257.665085][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3257.670723][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3257.670750][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3257.676481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3257.693550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3257.699396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3257.705146][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3257.710898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3257.716692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3257.722460][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 03:49:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xec0}], 0x492492492492805, 0x0) 03:49:32 executing program 0: 03:49:32 executing program 3: 03:49:32 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x460000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:32 executing program 3: 03:49:32 executing program 0: [ 3263.905088][ C0] net_ratelimit: 23 callbacks suppressed [ 3263.905097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3263.905104][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3263.922283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3263.928062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3263.933916][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3263.939710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3263.945457][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3263.951383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3263.957139][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3263.962914][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:39 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f000058bfe4)="29000000140003b7ff000200040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) 03:49:39 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf00}], 0x492492492492805, 0x0) 03:49:39 executing program 3: 03:49:39 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x461000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:39 executing program 0: setresuid(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sigaltstack(&(0x7f0000a00000/0x600000)=nil, &(0x7f0000000380)) sendfile(r0, r1, 0x0, 0x320f) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) lstat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000200)=[0x0, r2]) [ 3270.145060][ C0] net_ratelimit: 25 callbacks suppressed [ 3270.145069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3270.145089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3270.150761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3270.167892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3270.173597][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3270.179364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3270.185100][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3270.190817][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3270.196593][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3270.202348][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:49:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1051}], 0x492492492492805, 0x0) 03:49:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@dev}, {@in=@multicast2, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 03:49:46 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x462000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x380010a, 0x100812, r0, 0x0) write(r0, &(0x7f0000000000), 0x52698b21) 03:49:46 executing program 3: msgctl$IPC_RMID(0x0, 0x4901) 03:49:46 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) [ 3276.385062][ C0] net_ratelimit: 25 callbacks suppressed [ 3276.385071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3276.385089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3276.390740][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3276.407887][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3276.413601][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3276.419422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3276.425153][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3276.430892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3276.436642][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3276.442365][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:50 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x42) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0x358, &(0x7f0000000500)={&(0x7f0000000580)={0xa8, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2d6769bf594e5cc7}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x3e4, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1c0000}]}, @TIPC_NLA_BEARER={0x17c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}, 0x17cb9cb2}}, {0x14, 0x2, @in={0x2, 0x81, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x671e1d31}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @local, 0xce88}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8c}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x371d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x49}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x800}, 0x40040) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r5, 0x0) 03:49:50 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x5, 0xc0600) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) 03:49:50 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x2000}], 0x492492492492805, 0x0) 03:49:50 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x463000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:50 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x5}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x4) [ 3282.625059][ C0] net_ratelimit: 24 callbacks suppressed [ 3282.625069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3282.625106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3282.630850][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3282.648002][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3282.653740][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3282.659647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3282.665398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3282.671219][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3282.677006][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3282.682742][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:49:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xa}, 0x0) 03:49:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4800}], 0x492492492492805, 0x0) 03:49:55 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) sendto$packet(r1, &(0x7f0000000040)="7bbfc74aed5e06ceb8d6c6b9e61a", 0xe, 0x20000000, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:49:55 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1f00000000000000) 03:49:55 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x464000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:49:55 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4c00}], 0x492492492492805, 0x0) 03:49:55 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) sendto$packet(r1, &(0x7f0000000040)="7bbfc74aed5e06ceb8d6c6b9e61a", 0xe, 0x20000000, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) [ 3288.865057][ C0] net_ratelimit: 24 callbacks suppressed [ 3288.865065][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3288.865084][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.870730][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.887938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3288.893658][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.899391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3288.905137][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.910873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3288.916605][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3288.922445][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:50:01 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x42) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0x358, &(0x7f0000000500)={&(0x7f0000000580)={0xa8, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2d6769bf594e5cc7}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x3e4, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1c0000}]}, @TIPC_NLA_BEARER={0x17c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}, 0x17cb9cb2}}, {0x14, 0x2, @in={0x2, 0x81, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x671e1d31}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @local, 0xce88}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8c}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x371d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x49}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x800}, 0x40040) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r5, 0x0) 03:50:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x5110}], 0x492492492492805, 0x0) 03:50:01 executing program 3: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x463000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:01 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x465000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:01 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1e00000000000000) [ 3295.105155][ C0] net_ratelimit: 25 callbacks suppressed [ 3295.105164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3295.105190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3295.110939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3295.128073][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3295.133780][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3295.139522][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3295.145247][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3295.150978][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3295.156743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3295.162475][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:50:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xe}, 0x0) 03:50:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x5865}], 0x492492492492805, 0x0) 03:50:07 executing program 0: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x2b2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:07 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x502000000000000) 03:50:07 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x466000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6000}], 0x492492492492805, 0x0) 03:50:07 executing program 3: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x2, 0x6, @broadcast}, 0x17) 03:50:11 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6558}], 0x492492492492805, 0x0) 03:50:11 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) dup2(r0, r2) 03:50:11 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x467000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:11 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x42) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0x358, &(0x7f0000000500)={&(0x7f0000000580)={0xa8, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2d6769bf594e5cc7}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r4, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x3e4, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1c0000}]}, @TIPC_NLA_BEARER={0x17c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}, 0x17cb9cb2}}, {0x14, 0x2, @in={0x2, 0x81, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x671e1d31}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @local, 0xce88}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8c}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x371d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x49}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x800}, 0x40040) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r5, 0x0) 03:50:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) sendmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="4f3e41b5b0e62974f2a92bf4f669e99bf660401bd8b0e8141db87bb3662d38024e9e461419e30e92012917dd643aa5bf1aed71062bf296b3eb2e98301832f28fd16238e6c025294cf41bb1cd0940a34b4c4eb38ee3b0f1ee134ae0fad43f031dfe1ed3bed5f9a7cc9881eb3932", 0x6d}, {&(0x7f0000000100)="cfb3edc4670f13f0d85e730d6be4cd0ddc71ec4a07b49664ba579bd7efb6a5e796c80d6137e0de05f16cf508ccd8074037448fc69c6a0a74eba95a66bc0fa2eded2640b6ec8b65838b88bb", 0x4b}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x56, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=""/86}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 3301.345155][ C1] net_ratelimit: 25 callbacks suppressed [ 3301.345163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3301.345197][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3301.350835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3301.356562][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3301.373651][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3301.379404][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3301.385117][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3301.390885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3301.396599][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3301.402315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.585139][ C0] net_ratelimit: 25 callbacks suppressed [ 3307.585147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.585178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3307.590821][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3307.607981][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.613686][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3307.619429][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.625156][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3307.630879][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3307.636626][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3307.642365][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:50:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) 03:50:20 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11]}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[{0x18, 0x29, 0x3, "0c9c"}], 0x18}, 0x0) 03:50:20 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6800}], 0x492492492492805, 0x0) 03:50:20 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x468000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:20 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11]}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[{0x18, 0x29, 0x3, '\f'}], 0x18}, 0x0) 03:50:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/96, 0x60}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$sock_timeval(r3, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) 03:50:20 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6c00}], 0x492492492492805, 0x0) 03:50:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000240)=""/204, 0xcc, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x4fe7196, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x7fffffff}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffeb2, 0x0, 0x0, 0x800e00545) shutdown(r1, 0x0) 03:50:20 executing program 0: 03:50:20 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x469000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:20 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7400}], 0x492492492492805, 0x0) 03:50:20 executing program 0: [ 3313.825082][ C0] net_ratelimit: 25 callbacks suppressed [ 3313.825092][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3313.836489][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3313.842300][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3313.848059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3313.853916][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3313.859666][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3313.865561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3313.871326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3313.877078][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3313.882809][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:50:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7a00}], 0x492492492492805, 0x0) 03:50:27 executing program 0: 03:50:27 executing program 3: 03:50:27 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x46a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:29 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x11]}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x29, 0x43}], 0x10}, 0x0) 03:50:29 executing program 3: 03:50:29 executing program 0: 03:50:29 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x8100}], 0x492492492492805, 0x0) 03:50:29 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x46b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:29 executing program 3: 03:50:29 executing program 0: [ 3320.065080][ C0] net_ratelimit: 23 callbacks suppressed [ 3320.065089][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3320.065107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.070753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.087980][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3320.093689][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.099470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3320.105239][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.110995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3320.116792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3320.122544][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:50:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:50:36 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc000}], 0x492492492492805, 0x0) 03:50:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xcffa808b513f9ded, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:50:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xcffa808b513f9ded, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:50:36 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x46c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3326.305161][ C0] net_ratelimit: 25 callbacks suppressed [ 3326.305171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3326.305202][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3326.310863][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3326.328031][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3326.333785][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3326.339574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3326.345332][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3326.351071][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3326.356899][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3326.362643][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:50:42 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x5020000) 03:50:42 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00e}], 0x492492492492805, 0x0) 03:50:42 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x46d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:42 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1f000000) 03:50:42 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1e000000) 03:50:43 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x2000000) 03:50:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xff03}], 0x492492492492805, 0x0) [ 3332.545145][ C0] net_ratelimit: 25 callbacks suppressed [ 3332.545152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3332.555066][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3332.556657][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3332.562432][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3332.568167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3332.579550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3332.585333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3332.591075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3332.596829][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3332.602564][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 03:50:47 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x4000) 03:50:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x33fe0}], 0x492492492492805, 0x0) 03:50:47 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x46e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:47 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1f00) [ 3338.785139][ C0] net_ratelimit: 26 callbacks suppressed [ 3338.785156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.785193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3338.790936][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.808109][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3338.813873][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.819643][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3338.825387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.831210][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3338.836979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3338.842729][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:50:54 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x5020000) 03:50:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x34000}], 0x492492492492805, 0x0) 03:50:54 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x13) 03:50:54 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x1f6, r0, 0x0) 03:50:54 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x46f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:50:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x40000}], 0x492492492492805, 0x0) 03:50:54 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x208, 0x11, r0, 0x0) [ 3345.025076][ C1] net_ratelimit: 26 callbacks suppressed [ 3345.025100][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.030740][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3345.036494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3345.042144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.047853][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.059286][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3345.065572][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.071293][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3345.077094][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3345.082853][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:51:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x129f}, 0x0) 03:51:00 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x4, 0x11, r0, 0x0) 03:51:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x400300}], 0x492492492492805, 0x0) 03:51:00 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x470000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:00 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x20fe01, 0x205, 0x11, r0, 0x0) [ 3351.265073][ C0] net_ratelimit: 25 callbacks suppressed [ 3351.265082][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3351.265101][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.270758][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.288050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3351.293765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.299584][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3351.305317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.311036][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3351.316781][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3351.322529][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:51:07 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x5020000) 03:51:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1000000}], 0x492492492492805, 0x0) 03:51:07 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x4, 0x11, r0, 0x0) 03:51:07 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x471000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:07 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x20f601, 0x205, 0x11, r0, 0x0) 03:51:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x2000000}], 0x492492492492805, 0x0) 03:51:07 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e1e, 0x205, 0x11, r0, 0x0) [ 3357.505091][ C1] net_ratelimit: 24 callbacks suppressed [ 3357.505101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3357.505144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3357.510873][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3357.516613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3357.533711][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3357.539451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3357.545185][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3357.550946][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3357.556664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3357.562422][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:51:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 03:51:14 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e1e, 0x205, 0x11, r0, 0x0) 03:51:14 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x472000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x3000000}], 0x492492492492805, 0x0) 03:51:14 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e02, 0x205, 0x11, r0, 0x0) [ 3363.745075][ C1] net_ratelimit: 25 callbacks suppressed [ 3363.745109][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.750761][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3363.756515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3363.762170][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.767895][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.779358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3363.785073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.790805][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3363.796541][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3363.802262][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:51:20 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) close(r0) 03:51:20 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4000000}], 0x492492492492805, 0x0) 03:51:20 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e02, 0x205, 0x11, r0, 0x0) 03:51:20 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x200002, 0x205, 0x11, r0, 0x0) 03:51:20 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x473000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x5000000}], 0x492492492492805, 0x0) 03:51:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x2, @vbi}) socket$nl_crypto(0x10, 0x3, 0x15) [ 3369.985066][ C0] net_ratelimit: 24 callbacks suppressed [ 3369.985075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3369.985125][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3369.991019][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3369.996730][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3370.002443][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3370.019554][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3370.025274][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3370.031029][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3370.036782][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3370.042500][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x9f12}, 0x0) 03:51:27 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32, @ANYBLOB="000007000000000003000000080001006270660050000200080004000000000004000500400002003c0001000000ff03008af4a98fd704b34bf14b726a11becf04000000000400000000000000e62900000000000000001100000000000000000000000000000000000000000003e8a44d00006b8af1fa454921483b79b0ec762852a47e69e60c061f9c871cc395fa86f369a04912c9e69817f049ec6df0e44a2b27bc64af847665f32224e4d778548bc7cba4aad65985da75ad8f3dcb3ee4b78dd97dc5e138da76d28c07639b67c57cc5df12fe95535049"], 0x7c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x25e, 0x0) 03:51:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6000000}], 0x492492492492805, 0x0) 03:51:27 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x474000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x2, @vbi}) socket$nl_crypto(0x10, 0x3, 0x15) [ 3376.225090][ C0] net_ratelimit: 25 callbacks suppressed [ 3376.225100][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3376.236521][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3376.242252][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3376.248038][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3376.253773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3376.259531][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3376.265300][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3376.271143][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3376.276877][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3376.282615][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000240)='./file0\x00', 0x200, 0x0, 0x0, 0x0, &(0x7f0000000480)='/selinux/commit_pending_bools\x00') 03:51:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7000000}], 0x492492492492805, 0x0) 03:51:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:51:32 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x9) 03:51:32 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x475000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x8000000}], 0x492492492492805, 0x0) 03:51:32 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8062}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x11, 0x5a7c797cf584dc3e, 0x0}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r1, 0x0) syz_genetlink_get_family_id$nbd(0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000f40)}]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) getegid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x200000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}, 0xd41d43cf63b0731) open(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r4, 0x0, 0x0, 0x4000) io_submit(0x0, 0x0, &(0x7f0000000540)) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/hwrng\x00', 0x0, 0x0) getuid() add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read(r5, 0x0, 0x144) [ 3380.142855][T19331] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3382.465080][ C0] net_ratelimit: 23 callbacks suppressed [ 3382.465088][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3382.465106][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3382.470762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3382.487911][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3382.493622][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3382.499397][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3382.505169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3382.510912][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3382.516728][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3382.522490][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:51:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:51:40 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x9000000}], 0x492492492492805, 0x0) 03:51:40 executing program 3: 03:51:40 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x476000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:40 executing program 0: [ 3388.705145][ C1] net_ratelimit: 25 callbacks suppressed [ 3388.705152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3388.715042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3388.716571][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3388.722277][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3388.733687][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3388.739432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3388.745206][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3388.750915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3388.756708][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3388.762432][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:43 executing program 2: 03:51:43 executing program 0: 03:51:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xa000000}], 0x492492492492805, 0x0) 03:51:43 executing program 3: 03:51:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x477000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:43 executing program 3: 03:51:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) [ 3394.945067][ C0] net_ratelimit: 24 callbacks suppressed [ 3394.945083][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3394.945101][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.950752][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.967980][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3394.973699][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.979471][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3394.985221][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3394.991119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3394.996898][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3395.002734][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.185106][ C0] net_ratelimit: 24 callbacks suppressed [ 3401.185113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.195044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.196518][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3401.202193][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3401.207910][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.219338][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3401.225101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.230827][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3401.236576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3401.242314][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:51:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:51:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xb000000}], 0x492492492492805, 0x0) 03:51:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 03:51:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1600) 03:51:54 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x478000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:51:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') write$binfmt_script(r0, 0x0, 0x0) 03:51:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc000000}], 0x492492492492805, 0x0) [ 3402.010568][T19394] device bond_slave_1 entered promiscuous mode [ 3402.017737][T19392] device bond_slave_1 left promiscuous mode 03:51:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000003c0)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 03:51:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xd000000}], 0x492492492492805, 0x0) [ 3402.065452][T19401] device bond_slave_1 entered promiscuous mode [ 3402.080525][T19392] device bond_slave_1 left promiscuous mode 03:51:54 executing program 3 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:51:54 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe000000}], 0x492492492492805, 0x0) 03:51:54 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x479000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3402.281906][T19417] FAULT_INJECTION: forcing a failure. [ 3402.281906][T19417] name failslab, interval 1, probability 0, space 0, times 0 [ 3402.294666][T19417] CPU: 1 PID: 19417 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3402.302551][T19417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3402.312589][T19417] Call Trace: [ 3402.315869][T19417] dump_stack+0x11d/0x181 [ 3402.320182][T19417] should_fail.cold+0xa/0x1a [ 3402.324766][T19417] __should_failslab+0xee/0x130 [ 3402.329630][T19417] should_failslab+0x9/0x14 [ 3402.334121][T19417] kmem_cache_alloc+0x29/0x5d0 [ 3402.338922][T19417] ? vmacache_find+0xbd/0x1e0 [ 3402.343576][T19417] ? vmacache_find+0xcb/0x1e0 [ 3402.348246][T19417] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 3402.353772][T19417] vm_area_dup+0x49/0xf0 [ 3402.358012][T19417] __split_vma+0x88/0x350 [ 3402.362328][T19417] ? find_vma+0x3e/0x110 [ 3402.366572][T19417] __do_munmap+0x233/0xb60 [ 3402.370973][T19417] mmap_region+0x165/0xd50 [ 3402.375401][T19417] do_mmap+0x6d4/0xba0 [ 3402.379458][T19417] vm_mmap_pgoff+0x12d/0x190 [ 3402.384031][T19417] ksys_mmap_pgoff+0x2d8/0x420 [ 3402.388777][T19417] __x64_sys_mmap+0x2e/0x40 [ 3402.393263][T19417] do_syscall_64+0xcc/0x370 [ 3402.397761][T19417] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3402.403705][T19417] RIP: 0033:0x45a639 [ 3402.407656][T19417] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3402.427252][T19417] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3402.435642][T19417] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3402.443593][T19417] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3402.451544][T19417] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3402.459504][T19417] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3402.467455][T19417] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 [ 3407.425059][ C1] net_ratelimit: 24 callbacks suppressed [ 3407.425068][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3407.425075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3407.425121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3407.430768][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3407.436524][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3407.459329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3407.465076][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3407.470853][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3407.476643][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3407.482367][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:52:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:52:03 executing program 0 (fault-call:6 fault-nth:0): r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf000000}], 0x492492492492805, 0x0) 03:52:03 executing program 3 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x47a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:03 executing program 2: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x1000bb8, &(0x7f00000000c0)="b9ff0300000d698cb89e40f088471fffffff00004000632f77fbac141414e9", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 3411.334571][T19429] FAULT_INJECTION: forcing a failure. [ 3411.334571][T19429] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.352046][T19437] FAULT_INJECTION: forcing a failure. [ 3411.352046][T19437] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.364905][T19429] CPU: 0 PID: 19429 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3411.372830][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.382877][T19429] Call Trace: [ 3411.386169][T19429] dump_stack+0x11d/0x181 [ 3411.390540][T19429] should_fail.cold+0xa/0x1a [ 3411.395148][T19429] __should_failslab+0xee/0x130 [ 3411.400001][T19429] should_failslab+0x9/0x14 [ 3411.404506][T19429] kmem_cache_alloc+0x29/0x5d0 [ 3411.409273][T19429] ? apic_timer_interrupt+0xa/0x20 [ 3411.414463][T19429] anon_vma_clone+0xab/0x300 [ 3411.419069][T19429] __split_vma+0x132/0x350 [ 3411.423543][T19429] __do_munmap+0x233/0xb60 [ 3411.427954][T19429] mmap_region+0x165/0xd50 [ 3411.432377][T19429] do_mmap+0x6d4/0xba0 [ 3411.436454][T19429] vm_mmap_pgoff+0x12d/0x190 [ 3411.441070][T19429] ksys_mmap_pgoff+0x2d8/0x420 [ 3411.445832][T19429] __x64_sys_mmap+0x2e/0x40 [ 3411.450354][T19429] do_syscall_64+0xcc/0x370 [ 3411.454906][T19429] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3411.460812][T19429] RIP: 0033:0x45a639 [ 3411.464715][T19429] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3411.484330][T19429] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3411.492735][T19429] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3411.500694][T19429] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3411.508648][T19429] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3411.516608][T19429] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3411.524579][T19429] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 [ 3411.532556][T19437] CPU: 1 PID: 19437 Comm: syz-executor.0 Not tainted 5.4.0-rc7+ #0 [ 3411.540447][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.550502][T19437] Call Trace: [ 3411.553864][T19437] dump_stack+0x11d/0x181 [ 3411.558202][T19437] should_fail.cold+0xa/0x1a [ 3411.562841][T19437] __should_failslab+0xee/0x130 [ 3411.567768][T19437] should_failslab+0x9/0x14 [ 3411.572278][T19437] kmem_cache_alloc_node_trace+0x3b/0x670 [ 3411.578040][T19437] __get_vm_area_node+0x121/0x280 03:52:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x10000000}], 0x492492492492805, 0x0) 03:52:03 executing program 3 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3411.583070][T19437] __vmalloc_node_range+0xe5/0x4c0 [ 3411.588228][T19437] ? bpf_prog_alloc_no_stats+0x70/0x200 [ 3411.594049][T19437] __vmalloc+0x4d/0x70 [ 3411.598185][T19437] ? bpf_prog_alloc_no_stats+0x70/0x200 [ 3411.603731][T19437] bpf_prog_alloc_no_stats+0x70/0x200 [ 3411.609108][T19437] ? __rcu_read_unlock+0x66/0x3c0 [ 3411.614136][T19437] bpf_prog_alloc+0x36/0x140 [ 3411.618797][T19437] __get_filter+0xb8/0x1c0 [ 3411.623219][T19437] sk_attach_filter+0x27/0xa0 [ 3411.627940][T19437] sock_setsockopt+0x16d1/0x1850 [ 3411.632882][T19437] ? apparmor_socket_setsockopt+0x33/0x40 [ 3411.638696][T19437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3411.644948][T19437] __sys_setsockopt+0x34b/0x370 [ 3411.649816][T19437] __x64_sys_setsockopt+0x70/0x90 [ 3411.654852][T19437] do_syscall_64+0xcc/0x370 [ 3411.659442][T19437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3411.665371][T19437] RIP: 0033:0x45a639 [ 3411.666401][T19444] FAULT_INJECTION: forcing a failure. [ 3411.666401][T19444] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.669301][T19437] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3411.669310][T19437] RSP: 002b:00007fc2aea3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3411.709878][T19437] RAX: ffffffffffffffda RBX: 00007fc2aea3cc90 RCX: 000000000045a639 [ 3411.717846][T19437] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 3411.725815][T19437] RBP: 000000000075bfc8 R08: 0000000000000010 R09: 0000000000000000 [ 3411.733783][T19437] R10: 000000002002eff0 R11: 0000000000000246 R12: 00007fc2aea3d6d4 [ 3411.741751][T19437] R13: 00000000004c8f83 R14: 00000000004df918 R15: 0000000000000006 [ 3411.754885][T19444] CPU: 1 PID: 19444 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3411.762865][T19444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.772981][T19444] Call Trace: [ 3411.776281][T19444] dump_stack+0x11d/0x181 [ 3411.780614][T19444] should_fail.cold+0xa/0x1a [ 3411.785210][T19444] __should_failslab+0xee/0x130 [ 3411.790173][T19444] should_failslab+0x9/0x14 [ 3411.792199][T19437] syz-executor.0: vmalloc: allocation failure: 8192 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 3411.794723][T19444] kmem_cache_alloc+0x29/0x5d0 [ 3411.794767][T19444] vm_area_dup+0x49/0xf0 [ 3411.817924][T19444] __split_vma+0x88/0x350 [ 3411.822248][T19444] ? find_vma+0x3e/0x110 [ 3411.826497][T19444] __do_munmap+0x29e/0xb60 [ 3411.830908][T19444] mmap_region+0x165/0xd50 03:52:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x20000000}], 0x492492492492805, 0x0) [ 3411.835317][T19444] do_mmap+0x6d4/0xba0 [ 3411.839386][T19444] vm_mmap_pgoff+0x12d/0x190 [ 3411.844005][T19444] ksys_mmap_pgoff+0x2d8/0x420 [ 3411.848772][T19444] __x64_sys_mmap+0x2e/0x40 [ 3411.853270][T19444] do_syscall_64+0xcc/0x370 [ 3411.857855][T19444] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3411.863737][T19444] RIP: 0033:0x45a639 [ 3411.867645][T19444] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:52:04 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x47b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3411.887313][T19444] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3411.895758][T19444] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3411.903818][T19444] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3411.911777][T19444] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3411.919741][T19444] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3411.927702][T19444] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 [ 3411.938784][T19437] CPU: 0 PID: 19437 Comm: syz-executor.0 Not tainted 5.4.0-rc7+ #0 [ 3411.946689][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.956741][T19437] Call Trace: [ 3411.960031][T19437] dump_stack+0x11d/0x181 [ 3411.964410][T19437] warn_alloc.cold+0x72/0xcf [ 3411.969041][T19437] __vmalloc_node_range+0x373/0x4c0 [ 3411.974268][T19437] __vmalloc+0x4d/0x70 [ 3411.978344][T19437] ? bpf_prog_alloc_no_stats+0x70/0x200 [ 3411.983941][T19437] bpf_prog_alloc_no_stats+0x70/0x200 [ 3411.989336][T19437] ? __rcu_read_unlock+0x66/0x3c0 [ 3411.994400][T19437] bpf_prog_alloc+0x36/0x140 [ 3411.999018][T19437] __get_filter+0xb8/0x1c0 [ 3412.003546][T19437] sk_attach_filter+0x27/0xa0 [ 3412.008216][T19437] sock_setsockopt+0x16d1/0x1850 [ 3412.013208][T19437] ? apparmor_socket_setsockopt+0x33/0x40 [ 3412.018930][T19437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3412.025293][T19437] __sys_setsockopt+0x34b/0x370 [ 3412.030235][T19437] __x64_sys_setsockopt+0x70/0x90 [ 3412.035244][T19437] do_syscall_64+0xcc/0x370 [ 3412.039743][T19437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3412.045617][T19437] RIP: 0033:0x45a639 [ 3412.049578][T19437] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3412.069289][T19437] RSP: 002b:00007fc2aea3cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3412.077679][T19437] RAX: ffffffffffffffda RBX: 00007fc2aea3cc90 RCX: 000000000045a639 03:52:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x48000000}], 0x492492492492805, 0x0) 03:52:04 executing program 3 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3412.085727][T19437] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 3412.093804][T19437] RBP: 000000000075bfc8 R08: 0000000000000010 R09: 0000000000000000 [ 3412.101859][T19437] R10: 000000002002eff0 R11: 0000000000000246 R12: 00007fc2aea3d6d4 [ 3412.109824][T19437] R13: 00000000004c8f83 R14: 00000000004df918 R15: 0000000000000006 [ 3412.125399][T19437] Mem-Info: [ 3412.128767][T19437] active_anon:183575 inactive_anon:5370 isolated_anon:0 [ 3412.128767][T19437] active_file:12902 inactive_file:32855 isolated_file:0 [ 3412.128767][T19437] unevictable:512 dirty:38 writeback:11 unstable:0 [ 3412.128767][T19437] slab_reclaimable:5589 slab_unreclaimable:18621 [ 3412.128767][T19437] mapped:59234 shmem:275 pagetables:1897 bounce:0 [ 3412.128767][T19437] free:1548632 free_pcp:1250 free_cma:0 [ 3412.180140][T19437] Node 0 active_anon:734300kB inactive_anon:21480kB active_file:51472kB inactive_file:131420kB unevictable:2048kB isolated(anon):0kB isolated(file):0kB mapped:236936kB dirty:152kB writeback:44kB shmem:1100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 202752kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3412.210151][T19437] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 3412.241670][T19437] Node 0 DMA free:15908kB min:188kB low:232kB high:276kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3412.262423][T19460] FAULT_INJECTION: forcing a failure. [ 3412.262423][T19460] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.281300][T19437] lowmem_reserve[]: 0 2910 3617 3617 [ 3412.281793][T19460] CPU: 1 PID: 19460 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3412.290117][T19437] Node 0 DMA32 free:2284968kB min:35372kB low:44212kB high:53052kB active_anon:308316kB inactive_anon:20624kB active_file:21588kB inactive_file:93684kB unevictable:2048kB writepending:68kB present:3129332kB managed:2982556kB mlocked:2048kB kernel_stack:784kB pagetables:4160kB bounce:0kB free_pcp:2700kB local_pcp:1452kB free_cma:0kB [ 3412.294573][T19460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3412.294578][T19460] Call Trace: [ 3412.294620][T19460] dump_stack+0x11d/0x181 [ 3412.329422][T19437] lowmem_reserve[]: 0 0 707 707 [ 3412.335695][T19460] should_fail.cold+0xa/0x1a [ 3412.335717][T19460] __should_failslab+0xee/0x130 [ 3412.335744][T19460] should_failslab+0x9/0x14 [ 3412.339379][T19437] Node 0 Normal free:85140kB min:8600kB low:10748kB high:12896kB active_anon:428196kB inactive_anon:856kB active_file:29884kB inactive_file:37772kB unevictable:0kB writepending:96kB present:786432kB managed:724536kB mlocked:0kB kernel_stack:3208kB pagetables:3544kB bounce:0kB free_pcp:2264kB local_pcp:792kB free_cma:0kB [ 3412.343315][T19460] kmem_cache_alloc+0x29/0x5d0 [ 3412.343397][T19460] ? kmem_cache_alloc+0x1f3/0x5d0 [ 3412.351170][T19437] lowmem_reserve[]: 0 0 0 0 [ 3412.352737][T19460] anon_vma_clone+0xab/0x300 [ 3412.352881][T19460] __split_vma+0x132/0x350 [ 3412.358009][T19437] Node 1 Normal free:3806332kB min:45944kB low:57428kB high:68912kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870256kB mlocked:0kB kernel_stack:8kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3412.362099][T19460] ? find_vma+0x3e/0x110 [ 3412.362178][T19460] __do_munmap+0x29e/0xb60 [ 3412.395161][T19437] lowmem_reserve[]: 0 0 0 0 [ 3412.396882][T19460] mmap_region+0x165/0xd50 [ 3412.396906][T19460] do_mmap+0x6d4/0xba0 [ 3412.401928][T19437] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 3412.406475][T19460] vm_mmap_pgoff+0x12d/0x190 [ 3412.406556][T19460] ksys_mmap_pgoff+0x2d8/0x420 [ 3412.414835][T19437] Node 0 DMA32: 3070*4kB (UME) 2074*8kB (UME) 1558*16kB (UME) 1138*32kB (UME) 765*64kB (UME) 436*128kB (UM) 154*256kB (UM) 33*512kB (UME) 4*1024kB (UME) 9*2048kB (UM) 491*4096kB (UM) = 2284968kB [ 3412.415542][T19460] __x64_sys_mmap+0x2e/0x40 [ 3412.415570][T19460] do_syscall_64+0xcc/0x370 [ 3412.447131][T19437] Node 0 Normal: 6397*4kB (M) 3130*8kB (ME) 1024*16kB (ME) 284*32kB (ME) 90*64kB (ME) 18*128kB (ME) 4*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85188kB [ 3412.448074][T19460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3412.452504][T19437] Node 1 Normal: 3*4kB (UME) 4*8kB (UME) 7*16kB (UE) 9*32kB (UME) 3*64kB (UE) 2*128kB (UM) 5*256kB (UME) 0*512kB 3*1024kB (UM) 2*2048kB (UM) 927*4096kB (M) = 3806332kB [ 3412.456933][T19460] RIP: 0033:0x45a639 [ 3412.456979][T19460] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3412.456990][T19460] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3412.457006][T19460] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3412.457024][T19460] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3412.463061][T19437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3412.465467][T19460] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3412.465478][T19460] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3412.465489][T19460] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 [ 3412.637210][T19437] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3412.647652][T19437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3412.657265][T19437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3412.666620][T19437] 46056 total pagecache pages [ 3412.671383][T19437] 0 pages in swap cache [ 3412.675593][T19437] Swap cache stats: add 0, delete 0, find 0/0 [ 3412.681721][T19437] Free swap = 0kB [ 3412.685471][T19437] Total swap = 0kB [ 3412.689221][T19437] 1965979 pages RAM [ 3412.693000][T19437] 0 pages HighMem/MovableOnly [ 3412.697734][T19437] 67665 pages reserved [ 3412.701875][T19437] 0 pages cma reserved [ 3413.665123][ C0] net_ratelimit: 23 callbacks suppressed [ 3413.665129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3413.676541][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3413.682336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3413.688097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3413.693969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3413.699698][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3413.705441][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3413.711165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3413.716909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3413.722638][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3419.905032][ C0] net_ratelimit: 26 callbacks suppressed [ 3419.905038][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3419.916418][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3419.922162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3419.927908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3419.933659][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3419.939406][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3419.945166][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3419.950893][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3419.956687][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3419.962415][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 03:52:12 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x47c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:12 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4c000000}], 0x492492492492805, 0x0) 03:52:12 executing program 3 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:12 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3420.620299][T19474] FAULT_INJECTION: forcing a failure. [ 3420.620299][T19474] name failslab, interval 1, probability 0, space 0, times 0 [ 3420.645729][T19474] CPU: 0 PID: 19474 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3420.653632][T19474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3420.663711][T19474] Call Trace: [ 3420.667044][T19474] dump_stack+0x11d/0x181 [ 3420.671397][T19474] should_fail.cold+0xa/0x1a [ 3420.676015][T19474] __should_failslab+0xee/0x130 [ 3420.680873][T19474] should_failslab+0x9/0x14 [ 3420.685418][T19474] kmem_cache_alloc+0x29/0x5d0 [ 3420.690180][T19474] ? kmem_cache_alloc+0x1f3/0x5d0 [ 3420.695205][T19474] anon_vma_clone+0xab/0x300 [ 3420.699796][T19474] __split_vma+0x132/0x350 [ 3420.704218][T19474] ? find_vma+0x3e/0x110 [ 3420.708466][T19474] __do_munmap+0x29e/0xb60 [ 3420.712893][T19474] mmap_region+0x165/0xd50 [ 3420.717349][T19474] do_mmap+0x6d4/0xba0 [ 3420.721489][T19474] vm_mmap_pgoff+0x12d/0x190 [ 3420.726108][T19474] ksys_mmap_pgoff+0x2d8/0x420 [ 3420.730918][T19474] __x64_sys_mmap+0x2e/0x40 [ 3420.735455][T19474] do_syscall_64+0xcc/0x370 [ 3420.740022][T19474] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3420.745971][T19474] RIP: 0033:0x45a639 [ 3420.749899][T19474] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3420.769508][T19474] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3420.778081][T19474] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3420.786045][T19474] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3420.794015][T19474] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3420.801985][T19474] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3420.809964][T19474] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 03:52:14 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 03:52:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x51100000}], 0x492492492492805, 0x0) 03:52:14 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:14 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x47d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:14 executing program 3 (fault-call:3 fault-nth:5): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x60000000}], 0x492492492492805, 0x0) [ 3422.624405][T19488] FAULT_INJECTION: forcing a failure. [ 3422.624405][T19488] name failslab, interval 1, probability 0, space 0, times 0 [ 3422.640548][T19488] CPU: 1 PID: 19488 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3422.648440][T19488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3422.658481][T19488] Call Trace: [ 3422.661769][T19488] dump_stack+0x11d/0x181 [ 3422.666097][T19488] should_fail.cold+0xa/0x1a [ 3422.670722][T19488] __should_failslab+0xee/0x130 [ 3422.675626][T19488] should_failslab+0x9/0x14 [ 3422.680136][T19488] kmem_cache_alloc+0x29/0x5d0 [ 3422.684931][T19488] vm_area_alloc+0x48/0xf0 [ 3422.689341][T19488] mmap_region+0x694/0xd50 [ 3422.693775][T19488] do_mmap+0x6d4/0xba0 [ 3422.697950][T19488] vm_mmap_pgoff+0x12d/0x190 [ 3422.702588][T19488] ksys_mmap_pgoff+0x2d8/0x420 [ 3422.707382][T19488] __x64_sys_mmap+0x2e/0x40 [ 3422.711886][T19488] do_syscall_64+0xcc/0x370 [ 3422.716422][T19488] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3422.722311][T19488] RIP: 0033:0x45a639 [ 3422.726247][T19488] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3422.745850][T19488] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3422.754301][T19488] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3422.762270][T19488] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 03:52:15 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x47e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3422.770260][T19488] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3422.778235][T19488] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3422.786202][T19488] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 [ 3426.145120][ C0] net_ratelimit: 26 callbacks suppressed [ 3426.145127][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.156592][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3426.162341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.168094][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3426.173853][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.179591][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3426.185478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.191200][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3426.196968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3426.202692][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 03:52:22 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:22 executing program 3 (fault-call:3 fault-nth:6): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x65580000}], 0x492492492492805, 0x0) 03:52:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x47f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3429.909449][T19510] FAULT_INJECTION: forcing a failure. [ 3429.909449][T19510] name failslab, interval 1, probability 0, space 0, times 0 [ 3429.931199][T19510] CPU: 0 PID: 19510 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3429.939101][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3429.949239][T19510] Call Trace: [ 3429.952545][T19510] dump_stack+0x11d/0x181 [ 3429.956928][T19510] should_fail.cold+0xa/0x1a [ 3429.961520][T19510] __should_failslab+0xee/0x130 [ 3429.966369][T19510] should_failslab+0x9/0x14 [ 3429.970866][T19510] kmem_cache_alloc_trace+0x2a/0x5d0 [ 3429.976151][T19510] ? __read_once_size+0x41/0xe0 [ 3429.981003][T19510] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3429.986727][T19510] usbdev_mmap+0xd8/0x3f0 [ 3429.991177][T19510] mmap_region+0x83c/0xd50 [ 3429.995604][T19510] do_mmap+0x6d4/0xba0 [ 3429.999696][T19510] vm_mmap_pgoff+0x12d/0x190 [ 3430.004331][T19510] ksys_mmap_pgoff+0x2d8/0x420 [ 3430.009099][T19510] ? switch_fpu_return+0x11f/0x250 [ 3430.014208][T19510] __x64_sys_mmap+0x2e/0x40 [ 3430.018711][T19510] do_syscall_64+0xcc/0x370 [ 3430.023280][T19510] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3430.029167][T19510] RIP: 0033:0x45a639 [ 3430.033121][T19510] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3430.052789][T19510] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3430.061190][T19510] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3430.069229][T19510] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3430.077238][T19510] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3430.085249][T19510] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3430.093201][T19510] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 03:52:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x871f000000000000}, 0x300, &(0x7f0000000040)=[{&(0x7f0000000280), 0xff8f}], 0x1, &(0x7f0000001280)}, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000200)="40d7d156f0e76a87b791a027bfeea9f54062219923", 0x15}, {&(0x7f0000001280)="d63a578adf183826645811ad6d0d1cfabf567dc84b7e4f835e0182af4bac4763528525cfb7ec4c158d745a65e18d8b02f1cfbe7a7bccf0", 0x37}, {&(0x7f00000012c0)="9e9c4a64343d00e5f32c396f626bd6853c50ab015befb6e6c4dd8887efbb2e7860a15daef25c1036307799637b2f9992d05bfeea96c2361ea1a191e550cd9e9f3cd2cb25594f95909284252d520ccede113f4880629fef69c34a", 0x5a}, {0x0}, {0x0}], 0x6, &(0x7f0000001740)=[{0x70, 0x101, 0x1, "65b9c0f4745ffa873c8ffa6d735aa56cfafb0daa18b6740776146d2dcdb0d0534c8b9b4460db642f79b70ba77bfafce296a654d1bdc8db074a7b39c0e1bb8d00324b520edc245a0f3c0fca3ae48edb763100c6b3e48af5af31eb60f7fb05e653"}, {0xe8, 0x109, 0x8ad, "77adec7eb89f21f947f0b7793787e9d6b8d114ee31c6cbda9ced1c605926445b71046ff8dd0e56dba5d1e0d4f94da18a4b5f303e54a4fee7f52a99ab9c56792ffe3edc8a9eb25b53840e0b9e4da7dc3997b0111bbee4a86ec9f38b44e62b26787ab8b783775d9f84a88f8c99a76e2f9253209ff436544a24e8b5f078281cfffa1874bab3f003a5b12d1b5bdd473b5319d0183646f7afd2dd960a72b4b5de01c899bfd763f8ccfb6cfcc09a797710a6f27d865629133312cbf8b7527e88db825f1926c38876e80191b8dadbb0b3e5e9842b835d5e0de163"}, {0xc0, 0x9abb048a64bb5d9d, 0x2, "c586623e7dfb08dde505e6423dedb9bc9c8b05c526f0458e1f2d3eaf962389372d9dd204a0df0b25fbc911fe6d5728661a7f654489f286f6ce58ecc19fb348d7cc2c56c910453a0779e5f730faccd8353e3b334b7f46014ef5793668404cf6488d680625f12d2ecf1a342cf97c4901ffe285bfd7434a2d30c438d6659e415a4c14efecbb1863df8260d524adefcc559d862af5bb3aa8c445a90af6941de2a62415c1cbcea4c75f8d43a51165ca59be"}, {0x68, 0x119, 0xff, "5de9cf3ea27e1d734b8f620d7d5c938c934470e2c243f95e50d2e0841e503feced0fdf8482b6174eae4e842d5a39c1af396e0a64bfd24769362d8a1e876d22c81bff7daf04319274558584b129b07eb9c6fa7627c0aa"}, {0x78, 0x108, 0xc17e, "ce29c959b6957a3dd129648e1a13c59c4143d519cc018275b179cd87dad975a2a39fdb6120d28924d148dc34111caeef58a20710e5a586763bcd2dc98226a9fdc39635363932d359f9a02af7819fedc963973d15030468da1a4dd2d34df2c43ab8791a"}, {0x50, 0x105, 0x0, "2f77ad6e16301689684f7b3de47a88949e3572807797458508f484fdaff57c120d3fcfb11744fda2053c17e1576cb84f67ca151b1d76216f3d61b1"}, {0x18, 0x0, 0x1589, "d3"}, {0x38, 0x107, 0xff, "01241286943712f79474fbdf344da866f9e80e29c454ea9c25c09d1983bc4ffda354ce64d1"}], 0x398}, 0x20004000) 03:52:24 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x480000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x68000000}], 0x492492492492805, 0x0) 03:52:24 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x4, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:24 executing program 3 (fault-call:3 fault-nth:7): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:24 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6c000000}], 0x492492492492805, 0x0) [ 3431.926589][T19529] FAULT_INJECTION: forcing a failure. [ 3431.926589][T19529] name failslab, interval 1, probability 0, space 0, times 0 [ 3431.948412][T19529] CPU: 1 PID: 19529 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3431.956399][T19529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3431.966483][T19529] Call Trace: [ 3431.969773][T19529] dump_stack+0x11d/0x181 [ 3431.974157][T19529] should_fail.cold+0xa/0x1a [ 3431.978753][T19529] __should_failslab+0xee/0x130 [ 3431.983608][T19529] should_failslab+0x9/0x14 [ 3431.988176][T19529] __kmalloc+0x53/0x690 [ 3431.992410][T19529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3431.998659][T19529] ? apic_timer_interrupt+0xa/0x20 [ 3432.003768][T19529] ? hcd_buffer_alloc+0x191/0x1e0 [ 3432.008782][T19529] hcd_buffer_alloc+0x191/0x1e0 [ 3432.013628][T19529] usb_alloc_coherent+0x59/0x80 [ 3432.018485][T19529] usbdev_mmap+0x107/0x3f0 [ 3432.022898][T19529] ? __write_once_size+0x44/0xe0 [ 3432.027886][T19529] mmap_region+0x83c/0xd50 [ 3432.032320][T19529] do_mmap+0x6d4/0xba0 [ 3432.036418][T19529] vm_mmap_pgoff+0x12d/0x190 [ 3432.041027][T19529] ksys_mmap_pgoff+0x2d8/0x420 [ 3432.045797][T19529] __x64_sys_mmap+0x2e/0x40 [ 3432.050338][T19529] do_syscall_64+0xcc/0x370 [ 3432.054918][T19529] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3432.060823][T19529] RIP: 0033:0x45a639 03:52:24 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x5, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3432.064719][T19529] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3432.084370][T19529] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3432.092850][T19529] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3432.100824][T19529] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3432.108796][T19529] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3432.116805][T19529] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3432.124788][T19529] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 [ 3432.385125][ C0] net_ratelimit: 26 callbacks suppressed [ 3432.385135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3432.396854][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3432.402587][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3432.408380][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3432.414114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3432.419852][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3432.425627][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3432.431354][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3432.437108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3432.442844][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3438.625142][ C0] net_ratelimit: 26 callbacks suppressed [ 3438.625149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3438.636601][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3438.642343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3438.648101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3438.653837][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3438.659574][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3438.665349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3438.671057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3438.676808][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3438.682614][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 03:52:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x74000000}], 0x492492492492805, 0x0) 03:52:34 executing program 3 (fault-call:3 fault-nth:8): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x481000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:34 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x6, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3442.356863][T19553] FAULT_INJECTION: forcing a failure. [ 3442.356863][T19553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3442.370087][T19553] CPU: 1 PID: 19553 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3442.377970][T19553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3442.388062][T19553] Call Trace: [ 3442.391358][T19553] dump_stack+0x11d/0x181 [ 3442.395693][T19553] should_fail.cold+0xa/0x1a [ 3442.400297][T19553] should_fail_alloc_page+0x50/0x60 [ 3442.405496][T19553] __alloc_pages_nodemask+0xd2/0x310 [ 3442.410814][T19553] cache_grow_begin+0x76/0x670 [ 3442.415656][T19553] __kmalloc+0x59c/0x690 [ 3442.419903][T19553] ? apic_timer_interrupt+0xa/0x20 [ 3442.425018][T19553] ? hcd_buffer_alloc+0x191/0x1e0 [ 3442.430062][T19553] hcd_buffer_alloc+0x191/0x1e0 [ 3442.434976][T19553] usb_alloc_coherent+0x59/0x80 [ 3442.439829][T19553] usbdev_mmap+0x107/0x3f0 [ 3442.444308][T19553] mmap_region+0x83c/0xd50 [ 3442.448734][T19553] do_mmap+0x6d4/0xba0 [ 3442.452897][T19553] vm_mmap_pgoff+0x12d/0x190 [ 3442.457496][T19553] ksys_mmap_pgoff+0x2d8/0x420 [ 3442.462291][T19553] __x64_sys_mmap+0x2e/0x40 [ 3442.466847][T19553] do_syscall_64+0xcc/0x370 [ 3442.471355][T19553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3442.477242][T19553] RIP: 0033:0x45a639 [ 3442.481202][T19553] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3442.500805][T19553] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3442.509215][T19553] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3442.517206][T19553] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3442.525271][T19553] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3442.533298][T19553] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3442.541255][T19553] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 03:52:35 executing program 2: socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:52:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7a000000}], 0x492492492492805, 0x0) 03:52:35 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x32b, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:35 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x482000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:35 executing program 3 (fault-call:3 fault-nth:9): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:35 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x81000000}], 0x492492492492805, 0x0) [ 3443.362290][T19569] FAULT_INJECTION: forcing a failure. [ 3443.362290][T19569] name failslab, interval 1, probability 0, space 0, times 0 [ 3443.381838][T19569] CPU: 0 PID: 19569 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3443.389737][T19569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3443.399792][T19569] Call Trace: [ 3443.403085][T19569] dump_stack+0x11d/0x181 [ 3443.407413][T19569] should_fail.cold+0xa/0x1a [ 3443.412009][T19569] __should_failslab+0xee/0x130 [ 3443.416940][T19569] should_failslab+0x9/0x14 [ 3443.421440][T19569] kmem_cache_alloc_trace+0x2a/0x5d0 [ 3443.426725][T19569] ? perf_iterate_ctx+0x410/0x440 [ 3443.431752][T19569] ? __rcu_read_unlock+0x66/0x3c0 [ 3443.436829][T19569] ? vma_gap_callbacks_rotate+0x126/0x190 [ 3443.442550][T19569] ? perf_event_addr_filters_apply+0x3d0/0x3d0 [ 3443.448704][T19569] perf_event_mmap+0x3cd/0x960 [ 3443.453568][T19569] ? vma_interval_tree_insert+0x19b/0x230 [ 3443.459296][T19569] ? mmap_region+0x92a/0xd50 [ 3443.463883][T19569] mmap_region+0x302/0xd50 [ 3443.468306][T19569] do_mmap+0x6d4/0xba0 [ 3443.472442][T19569] vm_mmap_pgoff+0x12d/0x190 [ 3443.477033][T19569] ksys_mmap_pgoff+0x2d8/0x420 [ 3443.481795][T19569] ? switch_fpu_return+0x11f/0x250 [ 3443.486969][T19569] __x64_sys_mmap+0x2e/0x40 [ 3443.491478][T19569] do_syscall_64+0xcc/0x370 [ 3443.495986][T19569] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3443.501964][T19569] RIP: 0033:0x45a639 [ 3443.505896][T19569] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3443.525626][T19569] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3443.534176][T19569] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3443.542157][T19569] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3443.550172][T19569] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 03:52:35 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x500, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3443.558142][T19569] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3443.566114][T19569] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 [ 3444.865062][ C0] net_ratelimit: 26 callbacks suppressed [ 3444.870736][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3444.876480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3444.882229][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3444.887982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3444.893710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3444.899435][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3444.905166][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3444.910927][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3444.916642][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3444.922346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3451.105042][ C0] net_ratelimit: 26 callbacks suppressed [ 3451.105049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3451.116470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3451.122259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3451.128052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3451.133782][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3451.139522][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3451.145299][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3451.151021][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3451.156807][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3451.162525][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 03:52:44 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x483000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:44 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x88a8ffff}], 0x492492492492805, 0x0) 03:52:44 executing program 3 (fault-call:3 fault-nth:10): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:44 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2300, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:44 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 3452.766420][T19596] FAULT_INJECTION: forcing a failure. [ 3452.766420][T19596] name failslab, interval 1, probability 0, space 0, times 0 [ 3452.779575][T19596] CPU: 1 PID: 19596 Comm: syz-executor.3 Not tainted 5.4.0-rc7+ #0 [ 3452.787462][T19596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3452.797517][T19596] Call Trace: [ 3452.800932][T19596] dump_stack+0x11d/0x181 [ 3452.805262][T19596] should_fail.cold+0xa/0x1a [ 3452.809855][T19596] __should_failslab+0xee/0x130 [ 3452.814714][T19596] should_failslab+0x9/0x14 [ 3452.819228][T19596] kmem_cache_alloc_trace+0x2a/0x5d0 [ 3452.824505][T19596] ? perf_iterate_ctx+0x410/0x440 [ 3452.829535][T19596] ? __rcu_read_unlock+0x66/0x3c0 [ 3452.834568][T19596] ? apic_timer_interrupt+0xa/0x20 [ 3452.839699][T19596] ? perf_event_addr_filters_apply+0x3d0/0x3d0 [ 3452.845959][T19596] perf_event_mmap+0x3cd/0x960 [ 3452.850715][T19596] ? vma_interval_tree_insert+0x19b/0x230 [ 3452.856537][T19596] ? vma_link+0xee/0x130 [ 3452.860792][T19596] mmap_region+0x302/0xd50 [ 3452.865222][T19596] do_mmap+0x6d4/0xba0 [ 3452.869299][T19596] vm_mmap_pgoff+0x12d/0x190 [ 3452.873953][T19596] ksys_mmap_pgoff+0x2d8/0x420 [ 3452.878729][T19596] __x64_sys_mmap+0x2e/0x40 [ 3452.883243][T19596] do_syscall_64+0xcc/0x370 [ 3452.887749][T19596] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3452.893637][T19596] RIP: 0033:0x45a639 [ 3452.897539][T19596] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:52:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x9effffff}], 0x492492492492805, 0x0) 03:52:45 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x484000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3452.917254][T19596] RSP: 002b:00007f56100e9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3452.925680][T19596] RAX: ffffffffffffffda RBX: 00007f56100e9c90 RCX: 000000000045a639 [ 3452.933647][T19596] RDX: 0000000000000205 RSI: 0000000000204e00 RDI: 0000000020002000 [ 3452.941614][T19596] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 3452.949606][T19596] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f56100ea6d4 [ 3452.957581][T19596] R13: 00000000004c70bc R14: 00000000004dc888 R15: 0000000000000006 03:52:45 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2400, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:45 executing program 3 (fault-call:3 fault-nth:11): perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc0000000}], 0x492492492492805, 0x0) 03:52:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00e0000}], 0x492492492492805, 0x0) [ 3457.345055][ C0] net_ratelimit: 26 callbacks suppressed [ 3457.345062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.356503][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3457.362251][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.368011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3457.373850][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.379628][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3457.385404][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.391134][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3457.396959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3457.402685][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.585078][ C0] net_ratelimit: 26 callbacks suppressed [ 3463.585085][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.596691][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.602448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.608432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.614209][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.619972][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.625752][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.631607][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3463.637407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3463.643212][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:52:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:52:56 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x485000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:56 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe03f0300}], 0x492492492492805, 0x0) 03:52:56 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2500, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:52:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7cf}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090019c00efffeffe809000000ff0000f03ac710d1070000ffffffffffffffffffe7ee00ffffff9e0000000200000000", 0x58}], 0x1) 03:52:56 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x200002, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xeffdffff}], 0x492492492492805, 0x0) 03:52:56 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x486000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:52:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf0ffffff}], 0x492492492492805, 0x0) 03:52:56 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e02, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:52:56 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xff030000}], 0x492492492492805, 0x0) [ 3469.825067][ C0] net_ratelimit: 26 callbacks suppressed [ 3469.825077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3469.836468][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3469.842234][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3469.847999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3469.853756][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3469.859515][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3469.865276][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3469.871007][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3469.876768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3469.882476][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:53:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x9f120000}, 0x0) 03:53:06 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2600, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:06 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x487000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:06 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffa888}], 0x492492492492805, 0x0) 03:53:06 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e13, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x261801) r3 = syz_open_dev$admmidi(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) clock_gettime(0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x9, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)={0x85f, 0xa, 0x4, 0x20000, {}, {0x4, 0x2, 0x8, 0x3f, 0x0, 0xff, "3b95a7e4"}, 0x0, 0x3, @fd, 0x4}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r6, &(0x7f0000000200), 0x1c) listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x4000000000000d0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x40fdf) socketpair(0xd, 0x804, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x800000000080003, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 03:53:06 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffffdef}], 0x492492492492805, 0x0) 03:53:06 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e1e, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:06 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffff7f}], 0x492492492492805, 0x0) 03:53:06 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x488000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffff9e}], 0x492492492492805, 0x0) 03:53:07 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xfffffff0}], 0x492492492492805, 0x0) [ 3476.065046][ C0] net_ratelimit: 26 callbacks suppressed [ 3476.065052][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3476.076553][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3476.082273][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3476.088029][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3476.093750][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3476.099602][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3476.105374][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3476.111104][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3476.116830][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3476.122532][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3482.305076][ C0] net_ratelimit: 26 callbacks suppressed [ 3482.305087][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3482.316490][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3482.322231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3482.327989][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3482.333722][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3482.339537][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3482.345300][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3482.351089][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3482.356849][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3482.362580][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:53:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 03:53:17 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x20f601, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:17 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x489000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:17 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2700, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:17 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4000000000000}], 0x492492492492805, 0x0) 03:53:17 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) 03:53:17 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x40030000000000}], 0x492492492492805, 0x0) 03:53:17 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x20fe01, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:17 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x48a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:17 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x100000000000000}], 0x492492492492805, 0x0) 03:53:17 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x200000000000000}], 0x492492492492805, 0x0) 03:53:17 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2800, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3488.545122][ C0] net_ratelimit: 26 callbacks suppressed [ 3488.545128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3488.556531][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3488.562273][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3488.568065][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3488.573801][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3488.579553][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3488.585302][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3488.591006][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3488.596767][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3488.602495][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.785065][ C0] net_ratelimit: 26 callbacks suppressed [ 3494.785072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.796470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.802212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.808097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.813841][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.819648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.825405][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.831126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3494.836913][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3494.842640][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:53:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:53:27 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x4, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x300000000000000}], 0x492492492492805, 0x0) 03:53:27 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x48b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:27 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2900, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0xe3}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x21}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:53:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x400000000000000}], 0x492492492492805, 0x0) 03:53:27 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x208, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:27 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x500000000000000}], 0x492492492492805, 0x0) 03:53:27 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x48c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x600000000000000}], 0x492492492492805, 0x0) 03:53:28 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x1f6, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 03:53:32 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2a00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:32 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x48d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:32 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x1fe, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x700000000000000}], 0x492492492492805, 0x0) [ 3501.025040][ C0] net_ratelimit: 26 callbacks suppressed [ 3501.030715][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3501.036503][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3501.042245][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3501.047996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3501.053745][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3501.059483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3501.065252][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3501.070997][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3501.076827][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3501.082566][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:53:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=""/20, 0x14}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) 03:53:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x800000000000000}], 0x492492492492805, 0x0) 03:53:33 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x2) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:33 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x48e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:33 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2b00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:33 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x900000000000000}], 0x492492492492805, 0x0) 03:53:34 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x13) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:53:39 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x48f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:39 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xa00000000000000}], 0x492492492492805, 0x0) 03:53:39 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1e) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:39 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2b03, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3507.265169][ C0] net_ratelimit: 26 callbacks suppressed [ 3507.265195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3507.276608][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3507.282349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3507.288088][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3507.293842][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3507.299595][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3507.305383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3507.311149][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3507.316923][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3507.322646][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3513.505039][ C0] net_ratelimit: 26 callbacks suppressed [ 3513.510795][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3513.516585][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3513.522328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3513.528084][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3513.533890][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3513.539635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3513.545444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3513.551248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3513.556985][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3513.562720][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:53:47 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x205) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:47 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2c00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xb00000000000000}], 0x492492492492805, 0x0) 03:53:47 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x490000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:47 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc0c0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377d23f50011ad5657e94c464cd43eb85496fd3b03bcb2d9278ceb432194d9893ffa747dfe85309f256c910e31e81dcd3cd8a13744fc2874737a2ff34bf8c89f15da7cc0853434117d744e30360b38ef1a063f9ee506f048e9980054e6c5c5688d04ece6067ac55bccc9a7773a2c4e21c039d153622130faff9fd675d64ad7284bd011b9b224713a721b4b731cf342357642a1a0bb846f5be443b7e72e9825b5f3a078c6ae09e4512dd93a5be1af13a49e6a33938509d3557aecf2356ac2329871b662a99cf3fd2486b064e7e6f90c1f8d632186a8bda338b02d45da4ea9041d42a23f40b93346dddc473a9f1a3d9f0285b7e48cbb87bc34d44b090a5e2aaf4764a10a44168f1719eff0b0d9bc1ce07750af4c21d0c67eae0799e91328c8b14869e4edd255a41735a2b1818aa9d3b271ba757af010ae6dbad89aa0d8f5b6f8ef3917adcedf247ffcf9ade407dfb5094", 0x534, 0xc001, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca5babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a74ac205b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 03:53:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00000000000000}], 0x492492492492805, 0x0) 03:53:47 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x502) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x2) 03:53:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xd00000000000000}], 0x492492492492805, 0x0) 03:53:48 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x491000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:48 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1300) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:48 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2d00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:48 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe00000000000000}], 0x492492492492805, 0x0) [ 3519.745143][ C0] net_ratelimit: 26 callbacks suppressed [ 3519.745150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3519.756598][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3519.762384][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3519.768149][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3519.773931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3519.779723][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3519.785478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3519.791198][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3519.797003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3519.802731][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3525.985047][ C0] net_ratelimit: 26 callbacks suppressed [ 3525.990746][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3525.996515][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3526.002266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3526.008086][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3526.013834][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3526.019575][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3526.025359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3526.031099][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3526.036845][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3526.042574][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:53:58 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/155, 0x9b}], 0x1) 03:53:58 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1e00) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:53:58 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf00000000000000}], 0x492492492492805, 0x0) 03:53:58 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x492000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:53:58 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2e00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:53:58 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x1000000000000000}], 0x492492492492805, 0x0) 03:54:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x3) 03:54:03 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1f00) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:03 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x493000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x2000000000000000}], 0x492492492492805, 0x0) 03:54:03 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x2f00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:03 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4800000000000000}], 0x492492492492805, 0x0) [ 3532.225150][ C0] net_ratelimit: 26 callbacks suppressed [ 3532.225156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3532.236668][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3532.242394][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3532.248135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3532.253867][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3532.259754][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3532.265629][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3532.271415][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3532.277160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3532.282874][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:54:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) 03:54:09 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x4000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:09 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x4c00000000000000}], 0x492492492492805, 0x0) 03:54:09 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x494000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:09 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3000, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:09 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x5110000000000000}], 0x492492492492805, 0x0) [ 3538.465153][ C0] net_ratelimit: 26 callbacks suppressed [ 3538.470903][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3538.476649][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3538.482398][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3538.488116][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3538.493984][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3538.499692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3538.505410][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3538.511292][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3538.517050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3538.522769][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:54:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x4) 03:54:14 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x2000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6000000000000000}], 0x492492492492805, 0x0) 03:54:14 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x495000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:14 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3100, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:14 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6558000000000000}], 0x492492492492805, 0x0) [ 3544.705054][ C0] net_ratelimit: 26 callbacks suppressed [ 3544.705061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3544.716521][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3544.722330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3544.728154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3544.733902][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3544.739650][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3544.745393][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3544.751118][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3544.756880][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3544.762643][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:54:21 executing program 2: syz_emit_ethernet(0x2ef, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x49, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x3, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0) 03:54:21 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x5020000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6800000000000000}], 0x492492492492805, 0x0) 03:54:21 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x496000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:21 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3200, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:21 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x6c00000000000000}], 0x492492492492805, 0x0) [ 3550.945071][ C0] net_ratelimit: 26 callbacks suppressed [ 3550.945081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3550.956513][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3550.962257][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3550.968026][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3550.973792][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3550.979552][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3550.985521][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3550.991264][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3550.997030][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3551.002794][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:54:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0xa) 03:54:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7400000000000000}], 0x492492492492805, 0x0) 03:54:23 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x13000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:23 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x497000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:23 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3300, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:23 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x7a00000000000000}], 0x492492492492805, 0x0) [ 3557.185136][ C0] net_ratelimit: 26 callbacks suppressed [ 3557.185145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3557.196644][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3557.202429][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3557.208312][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3557.214118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3557.219874][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3557.225617][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3557.231341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3557.237109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3557.242835][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:54:34 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 03:54:34 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1e000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x498000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x8100000000000000}], 0x492492492492805, 0x0) 03:54:34 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3400, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0xe) 03:54:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x88a8ffff00000000}], 0x492492492492805, 0x0) 03:54:34 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1f000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x9effffff00000000}], 0x492492492492805, 0x0) 03:54:34 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x499000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:34 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc000000000000000}], 0x492492492492805, 0x0) 03:54:34 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x40000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3563.425053][ C0] net_ratelimit: 26 callbacks suppressed [ 3563.425072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3563.436609][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3563.442338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3563.448110][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3563.453851][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3563.459637][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3563.465386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3563.471089][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3563.476855][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3563.482592][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3569.665066][ C0] net_ratelimit: 26 callbacks suppressed [ 3569.665075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3569.676524][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3569.682269][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3569.688088][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3569.693861][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3569.699621][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3569.705391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3569.711154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3569.717050][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3569.722856][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:54:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) munmap(&(0x7f000001f000/0x2000)=nil, 0x2000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)) ioctl$TCFLSH(r2, 0x540b, 0x0) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 03:54:43 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3500, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:43 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xc00e000000000000}], 0x492492492492805, 0x0) 03:54:43 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x49a000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:43 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0xffffffffffdfa) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x60) 03:54:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xe03f030000000000}], 0x492492492492805, 0x0) 03:54:45 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x200000000000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:45 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x49b000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:45 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3600, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:54:45 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xeffdffff00000000}], 0x492492492492805, 0x0) 03:54:45 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x502000000000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3575.905068][ C0] net_ratelimit: 26 callbacks suppressed [ 3575.910746][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3575.916476][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3575.922282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3575.928015][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3575.933755][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3575.939466][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3575.945200][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3575.950913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3575.956640][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3575.962342][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3582.145084][ C0] net_ratelimit: 26 callbacks suppressed [ 3582.150749][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3582.156516][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3582.162290][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3582.168098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3582.174010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3582.179774][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3582.185525][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3582.191278][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3582.197081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3582.202807][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:54:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, 0x0) 03:54:59 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf0ffffff00000000}], 0x492492492492805, 0x0) 03:54:59 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x49c000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:54:59 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1300000000000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:54:59 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3700, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:55:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x300) 03:55:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xff03000000000000}], 0x492492492492805, 0x0) 03:55:00 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1e00000000000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:55:00 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x49d000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:00 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3800, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3588.385033][ C0] net_ratelimit: 26 callbacks suppressed [ 3588.385043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3588.396479][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3588.402249][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3588.408059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3588.413851][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3588.419693][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3588.425471][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:55:00 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xffffff7f00000000}], 0x492492492492805, 0x0) [ 3588.431197][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3588.436987][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3588.442718][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:55:00 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x1f00000000000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3594.625056][ C0] net_ratelimit: 26 callbacks suppressed [ 3594.625066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3594.636477][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3594.642294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3594.648051][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3594.653921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3594.659667][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3594.665415][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3594.671145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3594.676899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3594.682605][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:55:08 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23b, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f0000000400df05000000", @ANYRES32, @ANYBLOB="00000000ffffffff000e00000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000800000d00d337d05000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040000000600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000c22e0000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009230000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006fdb76f73223ab872e5655ffb63b6dd807f800000700000003000000000200000600000008000000b3000000060000004b0d00000500000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000004000000040000000ed000000010001000e0a00000020000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f0000000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff0500000006000000070000000300000010000500810306009fff04000800000004040600d90b0000ff00000005000000040000001ba2cc3b00000080010000003f000000ff0f0000bd52c97303000000be060000fffffffffffeffff7f000000ff0000008100000000db040009000000070000000300000000000000060000008f5e0000010000000002000006000000010100000200000007000000000000e03189000001040000000800000600000004000000080000000400000002000000c00000000800000008000000f7ffff0106000000810000004d00000001000080eb0700001f000000090000000800000001000000000000000000000002000000ffff00000100000002000000000000e0a000000040000000ff000000f7ffffff0500000009000000070000000600000028080000030000000600000004000000be00000003000000070000000500000038080000faffffffffffffff47b5554d001000008100000007000000ffffffff040000000100000002000000566b00002000000004000000020000008b01000001000000ffff000004000000ff0f0000050000002000000003000000e40d000007000000f8ffffff200000003f000000387f00000700000007000000c10a000009000000040000000400000000000000008000000100008009000000370b000000000080ff07000006000000bb7900000400000002000000ffffff7f0300000000000000090000000700000005000000000000807f0000000900000008000000fad4ffffff01000001010000010000003f0000000400000020f2ffff01000100ffff0000010000000200000008000000fbfffffff9ffffff040000004d000000060000000200000002000000070000004e0d0000000200000800000035000000300e00000700000000040000020000000180000020000000f2ffffff070000000500000000010000fffffeff0900000000080000070000000800000009000000ff7f00000900000004000000040000000000000006000000050000000100000009000000080000007e0700000300000000800000bf16000002000000d9c3ffffee0000000100000000000000001000006305000000000000000000007f00000010080000000000000100008002000000080000000101000003000000ffffff7ffffffffff7ffffff0600000003000000a6060000ff0300000700000001800000090000000200000000000000040000000080ffff00020000070000000500000001000100000000800000af06060000002b0a000005000000010000000500000009000000040000000500000002000000ffffff7ff30500000000000000000000ffff0000ff070000810000004000000075fc000009000000fbffffff0500000000000000810000000100000080000000d05e0000020000001f00000000000000ff010000451e00002d00000000000000ff0000001000030008001000ff0700000100000018"], 0x3}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd3bff0f000000000000fffff7", @ANYRES32=r5], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) bind(0xffffffffffffffff, &(0x7f0000000b80)=@xdp={0x2c, 0x1}, 0x80) close(r2) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 03:55:08 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:55:08 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x49e000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:08 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3900, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:55:08 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x4000000000000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3596.245260][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3596.385474][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0xa00) 03:55:09 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x8000000000000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:55:09 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x49f000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:09 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x2}], 0x492492492492805, 0x0) 03:55:09 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3a00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3597.715553][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:10 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0xfafdffffffff0f00) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3597.826049][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:10 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a0000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3600.865034][ C0] net_ratelimit: 26 callbacks suppressed [ 3600.865041][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3600.876408][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3600.882153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3600.888011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3600.893764][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3600.899531][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3600.905291][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3600.911008][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3600.916904][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3600.922628][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:55:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000540)={0xb00}) 03:55:13 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x3}], 0x492492492492805, 0x0) 03:55:13 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0xffffffff00000000) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:55:13 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3b00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:55:13 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a1000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3601.370570][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3607.105047][ C0] net_ratelimit: 26 callbacks suppressed [ 3607.105053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3607.116529][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3607.122268][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3607.128000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3607.133726][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3607.139478][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3607.145219][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3607.150959][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3607.156706][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3607.162458][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:55:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0xe00) 03:55:22 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r2, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:55:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x4}], 0x492492492492805, 0x0) 03:55:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a2000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:22 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3c00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:55:22 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x20000004e21, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 3610.199433][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x5}], 0x492492492492805, 0x0) 03:55:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a3000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:22 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001e2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup3(r4, r5, 0x0) dup2(r7, r6) r8 = perf_event_open(&(0x7f0000000880)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) r10 = accept(r4, &(0x7f00000001c0)=@rc, &(0x7f0000000240)=0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r9, 0x100}, &(0x7f0000000340)=0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000700)={r9, @in={{0x2, 0x4e22, @remote}}, 0x1000, 0xcc9f}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={r9, 0x7e3ae58a}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r9, 0x4, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x5, 0xff, 0x6, 0x9, 0x7, 0x2, 0x3, {r11, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x7, 0x5, 0xab64, 0x8}}, &(0x7f00000001c0)=0xb0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000040)={0x401, 0x3}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 3610.446613][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:22 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3d00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3610.544768][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:22 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x6}], 0x492492492492805, 0x0) 03:55:22 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a4000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3610.697023][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3610.782436][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3613.345061][ C0] net_ratelimit: 26 callbacks suppressed [ 3613.345067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3613.356462][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3613.362217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3613.367990][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3613.373718][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3613.379459][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3613.385251][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3613.390962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3613.396723][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3613.402439][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:55:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x129f) 03:55:28 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x7, {0x7}}, 0x18) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:55:28 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3e00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:55:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x7}], 0x492492492492805, 0x0) 03:55:28 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a5000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653f0d89abf4d209bc876003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc158bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec9", 0x6e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 3616.520810][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:28 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x8}], 0x492492492492805, 0x0) 03:55:28 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x20000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@v1={0x2, "1342e6f2e5f6d6"}, 0x8, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:55:28 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a6000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3616.725957][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:29 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0x9}], 0x492492492492805, 0x0) 03:55:29 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x3f00, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3616.908562][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:29 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a7000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) [ 3617.008374][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3619.585069][ C0] net_ratelimit: 26 callbacks suppressed [ 3619.585075][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3619.596569][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3619.602314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3619.608057][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3619.613788][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3619.619545][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3619.625354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3619.631088][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3619.636979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3619.642712][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:55:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x6000) 03:55:37 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000004c0)='./file0\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000500)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xa42, 0x80800) recvmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000140)=""/180, 0xb4}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/63, 0x3f}], 0x6}, 0x10000) 03:55:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0xa}], 0x492492492492805, 0x0) 03:55:37 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a8000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:37 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x4000, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:55:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) [ 3624.854436][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:37 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4a9000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0xb}], 0x492492492492805, 0x0) 03:55:37 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x4100, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3625.080811][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:37 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0xc}], 0x492492492492805, 0x0) 03:55:37 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4aa000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:37 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x4200, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3625.219839][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3625.296874][T20334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3625.825038][ C0] net_ratelimit: 26 callbacks suppressed [ 3625.825045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3625.836430][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3625.842167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3625.847894][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3625.853610][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3625.859374][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3625.865247][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3625.870956][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3625.876775][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3625.882489][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3632.065066][ C0] net_ratelimit: 26 callbacks suppressed [ 3632.065083][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3632.076572][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3632.082313][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3632.088061][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3632.093835][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3632.099732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3632.105492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3632.111229][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3632.117047][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3632.122821][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:55:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x9f12) 03:55:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0xd}], 0x492492492492805, 0x0) 03:55:46 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4ab000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:46 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="34e7fffeffff340000007f12b5f0fb0000010000000000b1cd06eaffff000093750500000000070000b7d0e2121788445389cf1f3406000000f706807490073cbc1192c91de591e36c4aacd4bf5b070000005e6b6020635eb90b59f3224e9c339c5ee041bb"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x4300, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 03:55:46 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0xfe, "bc92d6afd629619a30bee3bfeda8d068ec3b05ba754e83fccb59164d363d288f475e5cb0ebaa427b60ff3f33d499d5cae5696e5851ebfeae93899e9b7333766cb56b7e8c3b90054c21950f15d15782bbf7b3a4dea2186aa9faf5b9fe4b0883f1d5ecc4f777a2f2ee33d68298f423a7d4c31853074a3cba5d9e68e7081299e4ec269b4fd88f082bf05ddc98a10fae2fa48c25ac87d2ff88a765580469e05df05357016282c0934cdc74ae13dd761d560a7c2dc626888c266a2e67c17b2fd9fee22a761cb75bdefac43f85ae1d609d1e920b2105b1e88bd0436bd3aee0d3bcd11b590466696615b89ef73749f2f956adfd99aa2cfdec5adb9dd5d9a4eccdda"}, &(0x7f00000001c0)=0x122) 03:55:46 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) pipe2(&(0x7f00000004c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 3634.095710][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3634.160530][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:55:46 executing program 5: timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x4ac000) dup3(r1, r0, 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0x15) tkill(r2, 0x15) 03:55:46 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x52001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='\x00\x00\xf8\x00', 0x1a9b, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r3) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000000c0)={{0x3c4de7e904f8e903, 0x0, @descriptor="38ef999bf30a4fe0"}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x1, 0x3, 0x13, 0x20, 0x0, 0xa9dd, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb1, 0x8}, 0xa20, 0x5, 0x80, 0x0, 0xffffffff, 0x2, 0x6}, r2, 0xb, r5, 0x0) capget(&(0x7f0000000100)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000140)={0x80000000, 0x5, 0x1, 0x7, 0x9, 0x1f}) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) 03:55:46 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300f5006900000000000000ab00804803000000460001070000001419001400", 0x24}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008", 0x1b) r0 = socket(0x800000010, 0x1000000002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x0, 0xe}], 0x492492492492805, 0x0) [ 3634.337996][T20360] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 03:55:46 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1a9b, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4001, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20104, 0x0) write$apparmor_current(r2, &(0x7f0000000080)=@hat={'changehat ', 0x0, 0x5e, ['\x00', '/dev/bus/usb/00#/00#\x00']}, 0x33) mmap$usbfs(&(0x7f0000002000/0x4000)=nil, 0x204e00, 0x205, 0x11, r1, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) [ 3634.385980][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3634.397257][T20344] ================================================================== [ 3634.405366][T20344] BUG: KCSAN: data-race in file_remove_privs / new_sync_write [ 3634.412802][T20344] [ 3634.415123][T20344] write to 0xffff8881262ad984 of 4 bytes by task 20351 on cpu 1: [ 3634.422829][T20344] file_remove_privs+0x1cf/0x2b0 [ 3634.427756][T20344] __generic_file_write_iter+0xd2/0x380 [ 3634.433287][T20344] generic_file_write_iter+0x28c/0x390 [ 3634.438733][T20344] new_sync_write+0x388/0x4a0 [ 3634.443408][T20344] __vfs_write+0xb1/0xc0 [ 3634.447637][T20344] vfs_write+0x18a/0x390 [ 3634.451885][T20344] ksys_write+0xd5/0x1b0 [ 3634.456115][T20344] __x64_sys_write+0x4c/0x60 [ 3634.460700][T20344] do_syscall_64+0xcc/0x370 [ 3634.465191][T20344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3634.471060][T20344] [ 3634.473382][T20344] read to 0xffff8881262ad984 of 4 bytes by task 20344 on cpu 0: [ 3634.480996][T20344] new_sync_write+0x457/0x4a0 [ 3634.485655][T20344] __vfs_write+0xb1/0xc0 [ 3634.489882][T20344] vfs_write+0x18a/0x390 [ 3634.494114][T20344] ksys_write+0xd5/0x1b0 [ 3634.498345][T20344] __x64_sys_write+0x4c/0x60 [ 3634.502926][T20344] do_syscall_64+0xcc/0x370 [ 3634.507424][T20344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3634.513296][T20344] [ 3634.515609][T20344] Reported by Kernel Concurrency Sanitizer on: [ 3634.521751][T20344] CPU: 0 PID: 20344 Comm: syz-executor.0 Not tainted 5.4.0-rc7+ #0 [ 3634.529620][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3634.539658][T20344] ================================================================== [ 3634.547709][T20344] Kernel panic - not syncing: panic_on_warn set ... [ 3634.554288][T20344] CPU: 0 PID: 20344 Comm: syz-executor.0 Not tainted 5.4.0-rc7+ #0 [ 3634.562176][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3634.572236][T20344] Call Trace: [ 3634.575518][T20344] dump_stack+0x11d/0x181 [ 3634.579839][T20344] panic+0x210/0x640 [ 3634.583727][T20344] ? vprintk_func+0x8d/0x140 [ 3634.588313][T20344] kcsan_report.cold+0xc/0xd [ 3634.592899][T20344] kcsan_setup_watchpoint+0x3fe/0x460 [ 3634.598263][T20344] __tsan_read4+0xc6/0x100 [ 3634.602686][T20344] new_sync_write+0x457/0x4a0 [ 3634.607357][T20344] ? apparmor_file_permission+0x36/0x40 [ 3634.612892][T20344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3634.619138][T20344] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3634.625019][T20344] __vfs_write+0xb1/0xc0 [ 3634.629251][T20344] vfs_write+0x18a/0x390 [ 3634.633482][T20344] ksys_write+0xd5/0x1b0 [ 3634.637711][T20344] __x64_sys_write+0x4c/0x60 [ 3634.642297][T20344] do_syscall_64+0xcc/0x370 [ 3634.646790][T20344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3634.652753][T20344] RIP: 0033:0x45a639 [ 3634.656642][T20344] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3634.676229][T20344] RSP: 002b:00007fc2aea5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3634.684629][T20344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 3634.692591][T20344] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 3634.700562][T20344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3634.708524][T20344] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2aea5e6d4 [ 3634.716486][T20344] R13: 00000000004c7120 R14: 00000000004e2678 R15: 00000000ffffffff [ 3634.725591][T20344] Kernel Offset: disabled [ 3634.729910][T20344] Rebooting in 86400 seconds..