dbf2565fabb7cf545856f9a76c972216b12120dbab47caab07295c0337081100939c683698d0"], 0xae1) setsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="e13e2b74074dbd5b088db21330a47d295986fd8ac8c703949a589c8c91190fb2ca719e7a68dd6b8e005b4048d9d770438fa7044f2f2cba77080b2b371677a85730ff49af1c8ff3767ef9a662eb8158ffa72377b01bcb752424ed04ab3669b8a820a508bc7d6660637d6b2664215121ad56e63febbdd4cae093634341d8c7eee737976d3b3954553af67b52cf6ca17f06cf7715f38a7ea9eddd2451d26c9aa2c1976b3e50b5db06b0ac83ab57aa18fb4c1ef3631dfc144ee6f1ca01c0ba6896cc747f46bc42581a713344a4c895bbce47f3305f4847", @ANYRES16=r9, @ANYRES16=r2, @ANYRESDEC=r7, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYRESOCT=r3]], 0x5) 12:21:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x3, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 12:21:56 executing program 3: syz_open_dev$audion(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x7ffff000}}, 0x0) 12:21:56 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4100, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000200)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 12:21:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x1f, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:21:56 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r1, r0, r1}, &(0x7f0000000300)=""/87, 0x57, &(0x7f0000000600)={&(0x7f0000000540)={'rmd128\x00'}}) 12:21:56 executing program 4: syz_open_dev$audion(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x7ffff000}}, 0x0) 12:21:56 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:21:56 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4100, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000200)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 642.750600][T27432] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:21:57 executing program 5: syz_open_dev$audion(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x7ffff000}}, 0x0) 12:21:57 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="cb2a9211c704d5de3d44bafd3391a4a98d7eda097995be30395a9ec6fc3f32c365"], 0x21) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x1ffffffffff, 0x0) 12:21:57 executing program 1: socket$inet(0x10, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(0x0, 0xfffffffffffffff9, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1a480, 0x0) fchmodat(r1, 0x0, 0x40000000004e) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00\xf9\x9c+\x96tc\x9f\'}\x93\xb5\xb3\x04\xbb') setsockopt$inet6_dccp_int(r2, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 12:21:57 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4100, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000200)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) [ 643.254409][ C1] net_ratelimit: 16 callbacks suppressed [ 643.254418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 643.265946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 643.276279][T27449] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.284210][T27449] bridge0: port 1(bridge_slave_0) entered disabled state 12:21:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:21:57 executing program 3: syz_open_dev$audion(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x7ffff000}}, 0x0) [ 643.360298][T27449] device bridge0 left promiscuous mode [ 643.574407][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 643.580273][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 643.586131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 643.591889][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:21:57 executing program 2: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4100, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000200)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 12:21:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:21:58 executing program 4: syz_open_dev$audion(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) stat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd61, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x7ffff000}}, 0x0) 12:21:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 644.224364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 644.230217][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:21:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:21:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:21:58 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 644.585126][T27453] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.592253][T27453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.599726][T27453] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.606843][T27453] bridge0: port 1(bridge_slave_0) entered forwarding state 12:21:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 644.814650][T27453] device bridge0 entered promiscuous mode [ 644.854396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 644.860304][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 644.963655][T27469] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.970941][T27469] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.025724][T27469] device bridge0 left promiscuous mode 12:21:59 executing program 1: socket$inet(0x10, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(0x0, 0xfffffffffffffff9, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1a480, 0x0) fchmodat(r1, 0x0, 0x40000000004e) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00\xf9\x9c+\x96tc\x9f\'}\x93\xb5\xb3\x04\xbb') setsockopt$inet6_dccp_int(r2, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 12:21:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b80008100254588a8", 0x12}], 0x1}, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c1", 0x1}], 0x1}, 0xfc00) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0xcc539d13aa130b24, 0x0) write$cgroup_int(r3, 0x0, 0x0) 12:21:59 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x40085112, 0x0) 12:21:59 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='tmpfs\x00\x17\xeb\xc6z\nRn\xcdo\x14\xad_\xc6\xa8\x00\xe3|p\xb9\x86o\r\xb0\xef\t\xe4\x1ayFZxO\x8b\x0e\xe4\x11\xc0\x9f\xd8m!j,\xd5\xa7\xa0:\rX\f\xfc\x86\x89\xf1\x8d\x83\x85_\xb7\xe7\x03\xcf\xb1\x882\xd3\xfc\xc0njA\xe9\t\x8b\x1b\xd7\xf8\xb2\xaaJI\x83\x96\x12\xa6TWf\x01n\xfdX\xf2\xc8\xe21\xeb\xee\xa4R\xa9\x89\xc3\xaa|\x12\x85}\n\xf8\xc2&\xbaQ$\xd8d&\x7f\x90b\xcf\x99VW\xae\xb7\xb6Y\x00\xcb\xf4i\x7f,\\/\x8d\f\x9c)a\xe4\xc5\xab\x9f0x0) r1 = memfd_create(&(0x7f0000000000)='securitynoeev:ppp1b`ev\x00', 0x0) io_submit(r0, 0x2, &(0x7f00000007c0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x400, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 645.545492][T27511] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.552934][T27511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.561385][T27511] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.568949][T27511] bridge0: port 1(bridge_slave_0) entered forwarding state 12:21:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)) [ 645.655312][T27511] device bridge0 entered promiscuous mode 12:21:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7f, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) [ 645.706521][ T8602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 12:21:59 executing program 1: socket$inet(0x10, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(0x0, 0xfffffffffffffff9, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1a480, 0x0) fchmodat(r1, 0x0, 0x40000000004e) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00\xf9\x9c+\x96tc\x9f\'}\x93\xb5\xb3\x04\xbb') setsockopt$inet6_dccp_int(r2, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 12:21:59 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x100000000014b03a, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x69c4}) r1 = dup2(r0, r0) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x8086}, 0x60) 12:21:59 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff38c, 0xff03) 12:21:59 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='tmpfs\x00\x17\xeb\xc6z\nRn\xcdo\x14\xad_\xc6\xa8\x00\xe3|p\xb9\x86o\r\xb0\xef\t\xe4\x1ayFZxO\x8b\x0e\xe4\x11\xc0\x9f\xd8m!j,\xd5\xa7\xa0:\rX\f\xfc\x86\x89\xf1\x8d\x83\x85_\xb7\xe7\x03\xcf\xb1\x882\xd3\xfc\xc0njA\xe9\t\x8b\x1b\xd7\xf8\xb2\xaaJI\x83\x96\x12\xa6TWf\x01n\xfdX\xf2\xc8\xe21\xeb\xee\xa4R\xa9\x89\xc3\xaa|\x12\x85}\n\xf8\xc2&\xbaQ$\xd8d&\x7f\x90b\xcf\x99VW\xae\xb7\xb6Y\x00\xcb\xf4i\x7f,\\/\x8d\f\x9c)a\xe4\xc5\xab\x9f0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:22:01 executing program 1: socket$inet(0x10, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(0x0, 0xfffffffffffffff9, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1a480, 0x0) fchmodat(r1, 0x0, 0x40000000004e) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00\xf9\x9c+\x96tc\x9f\'}\x93\xb5\xb3\x04\xbb') setsockopt$inet6_dccp_int(r2, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 12:22:01 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='tmpfs\x00\x17\xeb\xc6z\nRn\xcdo\x14\xad_\xc6\xa8\x00\xe3|p\xb9\x86o\r\xb0\xef\t\xe4\x1ayFZxO\x8b\x0e\xe4\x11\xc0\x9f\xd8m!j,\xd5\xa7\xa0:\rX\f\xfc\x86\x89\xf1\x8d\x83\x85_\xb7\xe7\x03\xcf\xb1\x882\xd3\xfc\xc0njA\xe9\t\x8b\x1b\xd7\xf8\xb2\xaaJI\x83\x96\x12\xa6TWf\x01n\xfdX\xf2\xc8\xe21\xeb\xee\xa4R\xa9\x89\xc3\xaa|\x12\x85}\n\xf8\xc2&\xbaQ$\xd8d&\x7f\x90b\xcf\x99VW\xae\xb7\xb6Y\x00\xcb\xf4i\x7f,\\/\x8d\f\x9c)a\xe4\xc5\xab\x9f0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 647.050846][T27558] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.058641][T27558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.066094][T27558] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.073304][T27558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.087461][T27558] device bridge0 entered promiscuous mode 12:22:01 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='tmpfs\x00\x17\xeb\xc6z\nRn\xcdo\x14\xad_\xc6\xa8\x00\xe3|p\xb9\x86o\r\xb0\xef\t\xe4\x1ayFZxO\x8b\x0e\xe4\x11\xc0\x9f\xd8m!j,\xd5\xa7\xa0:\rX\f\xfc\x86\x89\xf1\x8d\x83\x85_\xb7\xe7\x03\xcf\xb1\x882\xd3\xfc\xc0njA\xe9\t\x8b\x1b\xd7\xf8\xb2\xaaJI\x83\x96\x12\xa6TWf\x01n\xfdX\xf2\xc8\xe21\xeb\xee\xa4R\xa9\x89\xc3\xaa|\x12\x85}\n\xf8\xc2&\xbaQ$\xd8d&\x7f\x90b\xcf\x99VW\xae\xb7\xb6Y\x00\xcb\xf4i\x7f,\\/\x8d\f\x9c)a\xe4\xc5\xab\x9f0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 647.375118][T27603] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.383065][T27603] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.456168][T27603] device bridge0 left promiscuous mode 12:22:01 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='tmpfs\x00\x17\xeb\xc6z\nRn\xcdo\x14\xad_\xc6\xa8\x00\xe3|p\xb9\x86o\r\xb0\xef\t\xe4\x1ayFZxO\x8b\x0e\xe4\x11\xc0\x9f\xd8m!j,\xd5\xa7\xa0:\rX\f\xfc\x86\x89\xf1\x8d\x83\x85_\xb7\xe7\x03\xcf\xb1\x882\xd3\xfc\xc0njA\xe9\t\x8b\x1b\xd7\xf8\xb2\xaaJI\x83\x96\x12\xa6TWf\x01n\xfdX\xf2\xc8\xe21\xeb\xee\xa4R\xa9\x89\xc3\xaa|\x12\x85}\n\xf8\xc2&\xbaQ$\xd8d&\x7f\x90b\xcf\x99VW\xae\xb7\xb6Y\x00\xcb\xf4i\x7f,\\/\x8d\f\x9c)a\xe4\xc5\xab\x9f0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:22:01 executing program 0: syz_execute_func(&(0x7f0000000400)="263414d52f98cd80c4e2fda6bd9ee7cafb29e4f3e467675cd9f6c4c27d1361000f381cd6d0c60beec7e4c753fbc48fe938015161418109c4c105e4affeebffff00c4da7676c4c3fd019300000000048f08eaeee073000080c4c3f30fc2810f000000e46de8e8484151f30f0fd2b05f8fea3812cf040000000f01d8660f3a2254e3000a7804e122e23d91660f382bb1c3580000c4c17f100e085a000000ac8fc8c0a26700489c9d5b5bc4a21d74830e0e55cd2726008fc92802fb20c3c4e2152f7604c4c21dbc21660f3a1781dc1b065bf40000c4c3e56af965c4e145d5bdf5ffffff142c4d66dad35bf48fe850864e0b850f10ebc4c2fd318a05000000b4bf825144e19c58e16e580fdf3b67f30f8d655666668225000000bd4343660f4f0164717136f20f01a4b5820300008fc8389e8e04000000001411c4e2bd45937c930000") [ 648.310531][T27614] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.317701][T27614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.325132][T27614] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.332280][T27614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.346384][T27614] device bridge0 entered promiscuous mode 12:22:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005e00)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) 12:22:02 executing program 5: inotify_init() arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 12:22:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000140)={[], 0x0, 0x0, 0x1000}) 12:22:02 executing program 0: clone(0x41fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace(0x4201, r0) 12:22:02 executing program 4: syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000400)="aa803199a0e537df8894c81eaaeafa1f06ea0caa17fa2866f84b08278099ddb8572d6681dc3f66df6bbf6e3efc61cb57c6b6eb14bee8d7082d7b427e09db9c4233934aa0a6a780f736395f7d1417ac9b", 0x50, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) [ 648.374418][ C0] net_ratelimit: 16 callbacks suppressed [ 648.374428][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 648.386003][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:02 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) [ 648.462688][T27645] Dead loop on virtual device ip6_vti0, fix it urgently! 12:22:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005e00)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) 12:22:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2805, 0x0, 0xf000000}, [@typed={0x5, 0x11, @str=':%/ime_type\x00'}]}, 0x24}}, 0x0) [ 648.513735][T27645] Dead loop on virtual device ip6_vti0, fix it urgently! [ 648.543384][T27645] Dead loop on virtual device ip6_vti0, fix it urgently! 12:22:02 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') getdents64(r0, 0x0, 0x0) [ 648.602593][T27645] Dead loop on virtual device ip6_vti0, fix it urgently! [ 648.646987][T27645] Dead loop on virtual device ip6_vti0, fix it urgently! 12:22:02 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) [ 648.703918][T27645] Dead loop on virtual device ip6_vti0, fix it urgently! [ 648.722134][T27668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 12:22:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005e00)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) 12:22:02 executing program 2: syz_open_dev$audion(0x0, 0x79, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$UHID_INPUT2(r1, 0x0, 0x0) getuid() getuid() stat(0x0, &(0x7f0000001580)) getresgid(0x0, 0x0, &(0x7f00000016c0)) stat(0x0, &(0x7f0000001840)) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "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", 0x1000}, 0xfffffffffffffc55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001340)) 12:22:02 executing program 4: io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f00000001c0)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:22:03 executing program 5: inotify_init() arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 12:22:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) [ 649.014408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 649.020432][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:03 executing program 0: clone(0x41fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace(0x4201, r0) 12:22:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005e00)=@getqdisc={0x24, 0x26, 0x30b}, 0x24}}, 0x0) 12:22:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:22:03 executing program 4: io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f00000001c0)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:22:03 executing program 3: io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f00000001c0)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:22:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101c02, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f00000008c0)=""/4096, 0xfffffffffffffd88}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f00000003c0)=""/189, 0xffffffffffffffda}, {&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/186, 0xba}], 0x9) prctl$PR_GET_DUMPABLE(0x3) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {0xfffffffffffffffe}, {}, @queue}], 0x1c) r1 = socket$kcm(0x10, 0x10000000005, 0x10) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000600)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000001e000507ed008064d200100001000080000000000080000000000300f88000f01700d0bd000000000000", 0x2e}], 0x1}, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1) 12:22:03 executing program 4: io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f00000001c0)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:22:03 executing program 3: io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f00000001c0)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:22:03 executing program 2: syz_open_dev$audion(0x0, 0x79, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$UHID_INPUT2(r1, 0x0, 0x0) getuid() getuid() stat(0x0, &(0x7f0000001580)) getresgid(0x0, 0x0, &(0x7f00000016c0)) stat(0x0, &(0x7f0000001840)) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "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", 0x1000}, 0xfffffffffffffc55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001340)) 12:22:03 executing program 4: io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f00000001c0)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:22:04 executing program 5: inotify_init() arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 12:22:04 executing program 1: syz_execute_func(&(0x7f0000000180)="0c19b5b598cd80c4a2c9a8aa17000000f56962f5696200d9d9d0c441395bf9f2680c0000008fe9589b26c7e4c753fbc4e101edfec4427d822a2a00c4efda7676f2168f4808eebce00000802000c4c3dd6d68074851518fe9509b9b9bfc0000c1ea01eff2f265dc5f00c35b5b45363ef80f9966030faee42c240f5e5bf447000026400f0d18c4221d01876c000000e3dffd60673667a5468e668e66660fd2a68c0000000f01c314111d54111d00") 12:22:04 executing program 0: clone(0x41fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace(0x4201, r0) 12:22:04 executing program 1: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x88040, 0x0) open(&(0x7f0000000180)='./file0/bus\x00', 0x1, 0x0) 12:22:04 executing program 3: io_setup(0x80400000000002, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000400)=[{}, {}], 0x0) r1 = memfd_create(&(0x7f00000001c0)='@u\x03\x00\x000\xa6\xc9\xf4\x89K\x16\xa6\xc1\xcc\xfcj\x97', 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:22:04 executing program 4: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) [ 650.295607][ T26] audit: type=1804 audit(1558441324.339:43): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/812/file0/bus" dev="ramfs" ino=125094 res=1 12:22:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xd74f84c47e6531b3, 0x0, 0x0, 0x1cf) 12:22:04 executing program 4: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:04 executing program 3: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) [ 650.400107][ T26] audit: type=1804 audit(1558441324.439:44): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/newroot/812/file0/bus" dev="ramfs" ino=125104 res=1 12:22:04 executing program 1: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:04 executing program 2: syz_open_dev$audion(0x0, 0x79, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$UHID_INPUT2(r1, 0x0, 0x0) getuid() getuid() stat(0x0, &(0x7f0000001580)) getresgid(0x0, 0x0, &(0x7f00000016c0)) stat(0x0, &(0x7f0000001840)) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "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", 0x1000}, 0xfffffffffffffc55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001340)) 12:22:04 executing program 4: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:04 executing program 3: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:04 executing program 1: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:05 executing program 0: clone(0x41fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace(0x4201, r0) 12:22:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xd74f84c47e6531b3, 0x0, 0x0, 0x1cf) 12:22:05 executing program 3: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:05 executing program 1: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:05 executing program 4: creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0xfe99) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f00000002c0), 0x1000000000000283, 0x10400003) 12:22:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10000000006, 0x4, 0x42, 0x1, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080)='c', 0x0}, 0x18) 12:22:05 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') 12:22:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x101c, &(0x7f00000000c0)) 12:22:05 executing program 2: syz_open_dev$audion(0x0, 0x79, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$UHID_INPUT2(r1, 0x0, 0x0) getuid() getuid() stat(0x0, &(0x7f0000001580)) getresgid(0x0, 0x0, &(0x7f00000016c0)) stat(0x0, &(0x7f0000001840)) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "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", 0x1000}, 0xfffffffffffffc55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001340)) 12:22:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x10}]]}}}]}, 0x3c}}, 0x0) 12:22:05 executing program 3: bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x10) move_pages(0x0, 0x4000000000000125, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 12:22:05 executing program 4: syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x47}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x364, 0x0) [ 651.735971][T27823] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 12:22:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0x20) syz_open_dev$media(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:22:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xd74f84c47e6531b3, 0x0, 0x0, 0x1cf) 12:22:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:05 executing program 0: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x7, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply={0xffffff83, 0x2}}}}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') 12:22:06 executing program 0: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x7, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply={0xffffff83, 0x2}}}}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') 12:22:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0x20) syz_open_dev$media(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:22:06 executing program 4: syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x47}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x364, 0x0) 12:22:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0x20) syz_open_dev$media(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:22:06 executing program 0: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x7, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply={0xffffff83, 0x2}}}}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') 12:22:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0x20) syz_open_dev$media(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:22:06 executing program 0: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x7, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply={0xffffff83, 0x2}}}}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') 12:22:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0), 0xd74f84c47e6531b3, 0x0, 0x0, 0x1cf) 12:22:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0x20) syz_open_dev$media(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:22:07 executing program 4: syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x47}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x364, 0x0) 12:22:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0x20) syz_open_dev$media(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 653.654560][ C1] net_ratelimit: 21 callbacks suppressed [ 653.654569][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 653.666077][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x100028, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x10) 12:22:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, 0x20) syz_open_dev$media(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 653.974383][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 653.980211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 653.986084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 653.991864][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:08 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000001c0)=')\\\x10X\x80\xa9\xbf\x8c\x9b\xd4s!\x14\xb0p.\\O\x90]\xd7\xdf\x943\xd8\xad\x12W\x9fZ~\x9e\xf3\x84/\xe4\x19\xe5=\xde\x8e\x91\xd3D\x99\x90\xf6U\xfe\x87\xe7\xd7\xccN<\xc6\xbb\x93\xb3\xf7\xcb7\xb7\t\xf4p #U\xf9:\x8c\xa1F\xd2\xa6p5\x804Y~\xc9\x19\x03R\xb8L\xef\xd0\x84f\xbe\'\xf2\xf9W3b\x9c\x1d)\xcc?7\xe9\xad\x16\xa0a\xab\xfb)\x0e\x10\xcb\n{\"\xecD\xfa\xdeuC\x86\x92\xad\xef\"3H\x89\x94\xcc\xed\xe3\xef\a\xe7\x106\xfd\xd1\xcfq\x02\xfe{R46g\xee\xa4\xb6\xe9w\xe9\x15c6\xac\xa6\xe8\x8fV\xa2V\xba\x7fa\xb2\xc9$V\xcd\x81\x1aI\xd8\xc4\x0e\xad\x9f|\x1c\xf9\x92\xf8j\x1b\xb1x\x9a\x93?\t', 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x1100, 0x7fffffffffffffff) 12:22:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:08 executing program 4: syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x47}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x364, 0x0) 12:22:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x100000000005, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 12:22:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='nr0\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x6) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x80000000) [ 654.619688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 654.626966][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:08 executing program 0: getrandom(0x0, 0xffffffffffffff24, 0x3) 12:22:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='nr0\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x6) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x80000000) 12:22:09 executing program 0: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x4, 0x36b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x3bb) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 655.254362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 655.260188][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3868b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc29044300"/237], 0xed) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) 12:22:09 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x2000000, 0x0, 0xffffffff00000002, 0x2000000000000001}, 0x21) 12:22:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='nr0\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x6) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x80000000) 12:22:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000100)=0xb8, 0x4) 12:22:09 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 12:22:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0xfff, 0x4) 12:22:10 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x7ff) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)) 12:22:10 executing program 1: setrlimit(0x1000000000000007, &(0x7f000068d000)) syz_execute_func(&(0x7f0000002a00)="0fbecc91cd80d3d369ef69dc00d9d0d0c44139fd5bf930c7c7e4c653fbc461f85a6136ace468f4a95ff9c44149f2168f4808eebce00000802000c421fc51c1ea01ef8f8920010e4545186746c4c10211cf26660fe98d0d000000c4e2e591a4fa0200000026ca400f0d18a018a0fe5ff6e3df646736676666430fefb3000000000804f4f30f1a12e250500f7c29") 12:22:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='nr0\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x100) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x6) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000000c0)=0x80000000) 12:22:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') 12:22:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 12:22:10 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5500000018007fa5b72d1cb2a4a280930206f00000a80909c02623692500060003000200f048a3c728f1c46b7b31afdc132fd54400009b841323426b58af69c14c9a117275995c6ef7e69183de448daa7203003ab8", 0x55}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 656.465291][T28010] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 656.478058][T28010] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:22:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 12:22:10 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000240)={{0x8}}) 12:22:10 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5500000018007fa5b72d1cb2a4a280930206f00000a80909c02623692500060003000200f048a3c728f1c46b7b31afdc132fd54400009b841323426b58af69c14c9a117275995c6ef7e69183de448daa7203003ab8", 0x55}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 12:22:10 executing program 5: syz_execute_func(&(0x7f0000000140)="26341698cd80c4e2fda6bd9ee7cafb29e4f3e467675cd9f6f30f1a99e3d258720f381cd6d0c60beec7e4c753fbc48fe938015161418109c4c105e4affeebffff8fc978c232da7676c4c3fd019300000000048f08eaeee073000066f3adf36e6dc4c2f9418188112ac4f30f0fd2b05f0f01d8c4e279248d000000007804e122e23d91fdc4c17f100e085a010000acd1c49c9c87779863e49863e40fcf55cd2726008fc92802fb20c3c4e2152f7604c4c21dbc21660f3a1781dc1b065bf40000c4c3e56af965c4e14552bdf5ffffea142c4d1d5bf48fe8864e0b850f10ebc4c2fd318a240000007d9cb4bfb4bf44e19c58e16e580fdf3b3bfe8225000000bd43660f4f0164717136f20f01a4b5820300008fc8389e8e04000000000f380733c4e2bd45937c930000") [ 656.615132][T28019] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 12:22:10 executing program 4: semctl$SETALL(0x0, 0x0, 0x10, 0x0) 12:22:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x20, 0x29, 0x2, "cbc333b8595a865187089d93d7000000045d"}], 0x20}}], 0x1, 0x0) [ 656.694489][T28019] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:22:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x4008ae8a, &(0x7f0000000480)={"d6eae2675662c765cad14480e786ce491d0d639b037adffa0d9df01dd24b1da93ad25c8830e402ada2a256e6c6adcaeff65c8b7e7f525946107a87bc85d401f7669253001621c339534e5aa3c32fa8cf16ca8d800bb8aa92f109953ec2a831fa76dc4f6503fd97dbea48f51317f21eefc4c02fe3dc417015b3795fbb60391a05f0cd5aded3da236f0a81cf4b5bb35c0291e306d6625c7dc7a108bda27e7e0460731caa9714805fd474b8a2fdeed8174f75ee415bfdcf18bf220872d7900ff6306d39d1d0b71ee6d172bcb0b88314dd86659d88b9f6ebecde2f6f01b776109e368161ca476127f0653400addea58ddf2c00ff683c6acb05658a16bb70c3afe4531230e37c56c4cc99e61b0bd2b3e985bdb40356ad1c8036a5c1ccced86d3d919f34ba7d59a9ff08dab27b6d5f248423ab1411aba93539e4623c07da7b820916d49dab3bfb04973bbe4a3c4c7c2fe1dd2c57fbdaf741e5de1cf33b5866dd38a8a3d3a441b848327c906fb67f2516d9b9c3de39027d9838f6b3f370831b220bf18c5ed458d0b286a35ff6eb11be58f593255a994194756241e422ac9b72e79adb2f0f30bc41791ca78e78c1d6eecdbf34794a8fa2c6789c62a907d192113373c3f347ba6d58573773770e918ebe37e2828983cbc475b2cedd35b755ee1fe2a11df623b051ea1e21252bdcfbe6d87bd35e2b346417e5e33e7d97e73619186e175c0b929f7857fd03ade58e1e64961a4b934cacb6dafde267c5c35b2e1adbed3ef9e364e80bc7e76e0ccefa3dc304b02d0d4af5ed288bf54a86713647d6ab1f32f66fcb279d00da54f07382608370be9d9453c541a7d5632cb57c02bd02f0609e6eb3173963305a094aa9ee38bc3fedab82c6b137404432272c892e5fd451703482f3963ac233629ae69955495649c8edfbe8e8ea52d8220bccb4da7ea797935aecfab8ae9958b6389b95327d4f5fa28f69f1f99cb0c8fa23ae98970dff9996febaab559af5a6c410784df2fce5a904526387b3769e4a9ac84c27f16d4deff752e87257deaa9850d53de7b787a14ad33fa4aed92a87b4479be8c633999e64567f34d148dffb2b654213f2508a3407f08566d1fad4fa752616c3cfee01f5f5a6117b00867e86911bc838377f0ce79df0cac55f81eca102b2d44d3c3efbf53a144e648fabbf3589b2e6b0bb72e4267c38ff5ef66e346407cbdfba7b893dd1461fa2f1a684a8befe9a30c69c980e8fb5d9e65c22b76de67fb190ae0c75bc10297c7e4ab6812e90ea443a01df049bbff8d693df960542e4f86c46fd23a02fc5d852dfc1989324e6576f5eca17f126fbd779708644f692a5da3d94548fd08ae32d984a333d963a54f8fa76b41e4f163216724fc298e458188edfbbc36bbe751807b5f5dec25b0c4650d03d274312022ba5e48b78420c99721ffa92ba5f9453fa88e5ae6eb3"}) 12:22:10 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000200)=0x200000c8) 12:22:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 12:22:10 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5500000018007fa5b72d1cb2a4a280930206f00000a80909c02623692500060003000200f048a3c728f1c46b7b31afdc132fd54400009b841323426b58af69c14c9a117275995c6ef7e69183de448daa7203003ab8", 0x55}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 12:22:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x7cd, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffff9c, 0xc2c45512, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000940)={0x5, 0xe34, 0xff, 0x28, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x3ae) 12:22:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00002cf2d2e06f7a3ae922360a5b4dbcc6281dfbae93cf4b35a70000000000fe80000000000000000000000000001e000000"], 0xb3}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) [ 656.951790][T28043] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 656.995628][T28043] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:22:11 executing program 0: r0 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xfe61) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="050300000600000000000200c52cf7c21975e697b02f08066b2b2ff0dac8897c6b11876d886b6621d8d217ccd51cc5471d130a6632a88161a6fd8f24286a07d057c3be255b33142fdd95208f", 0x4c, 0x0, 0x0, 0x0) 12:22:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00S\x9f\xe8\xd6Y\xc2\\\xaa\xc9\xf5{\a\x1e\x86[\b\x00a\xaf\xa4\x14\xec\xcd\x1a\r)X\xd1\xb4\xc4\xefm\x10Pc\xbaq\xd4UE\xf9\xe2\xa0*\x03Y\xd9\xca\xafH9\xb8*Z\x95\xbb\xa3\xdd\xd9\x10Y\a\xcf\xc2\xff\xc6\x00&\xb9\x00\x031\xc7d\xc9\xc6\xaf\x129\x1d\xf7t\x95\xd3k]\t\xf2\x053\xf9\x9d\xee\x18v\xc37') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:11 executing program 2: r0 = socket$inet6(0x10, 0x803, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5500000018007fa5b72d1cb2a4a280930206f00000a80909c02623692500060003000200f048a3c728f1c46b7b31afdc132fd54400009b841323426b58af69c14c9a117275995c6ef7e69183de448daa7203003ab8", 0x55}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 12:22:11 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8008000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r0) [ 657.243139][T28064] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 657.281720][T28064] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. 12:22:11 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305615, &(0x7f0000000340)={0x2}) 12:22:11 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0xc, 0x11, 0x67}], 0xc}, 0x0) 12:22:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00002cf2d2e06f7a3ae922360a5b4dbcc6281dfbae93cf4b35a70000000000fe80000000000000000000000000001e000000"], 0xb3}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 12:22:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00S\x9f\xe8\xd6Y\xc2\\\xaa\xc9\xf5{\a\x1e\x86[\b\x00a\xaf\xa4\x14\xec\xcd\x1a\r)X\xd1\xb4\xc4\xefm\x10Pc\xbaq\xd4UE\xf9\xe2\xa0*\x03Y\xd9\xca\xafH9\xb8*Z\x95\xbb\xa3\xdd\xd9\x10Y\a\xcf\xc2\xff\xc6\x00&\xb9\x00\x031\xc7d\xc9\xc6\xaf\x129\x1d\xf7t\x95\xd3k]\t\xf2\x053\xf9\x9d\xee\x18v\xc37') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00S\x9f\xe8\xd6Y\xc2\\\xaa\xc9\xf5{\a\x1e\x86[\b\x00a\xaf\xa4\x14\xec\xcd\x1a\r)X\xd1\xb4\xc4\xefm\x10Pc\xbaq\xd4UE\xf9\xe2\xa0*\x03Y\xd9\xca\xafH9\xb8*Z\x95\xbb\xa3\xdd\xd9\x10Y\a\xcf\xc2\xff\xc6\x00&\xb9\x00\x031\xc7d\xc9\xc6\xaf\x129\x1d\xf7t\x95\xd3k]\t\xf2\x053\xf9\x9d\xee\x18v\xc37') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00002cf2d2e06f7a3ae922360a5b4dbcc6281dfbae93cf4b35a70000000000fe80000000000000000000000000001e000000"], 0xb3}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 12:22:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000e3ff0800333f220005001a0005040063000005d972d0eac659f9a70800cf78c2df2a05056bb747cf6300000000050000"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) 12:22:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x12000, 0x0) 12:22:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00S\x9f\xe8\xd6Y\xc2\\\xaa\xc9\xf5{\a\x1e\x86[\b\x00a\xaf\xa4\x14\xec\xcd\x1a\r)X\xd1\xb4\xc4\xefm\x10Pc\xbaq\xd4UE\xf9\xe2\xa0*\x03Y\xd9\xca\xafH9\xb8*Z\x95\xbb\xa3\xdd\xd9\x10Y\a\xcf\xc2\xff\xc6\x00&\xb9\x00\x031\xc7d\xc9\xc6\xaf\x129\x1d\xf7t\x95\xd3k]\t\xf2\x053\xf9\x9d\xee\x18v\xc37') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00S\x9f\xe8\xd6Y\xc2\\\xaa\xc9\xf5{\a\x1e\x86[\b\x00a\xaf\xa4\x14\xec\xcd\x1a\r)X\xd1\xb4\xc4\xefm\x10Pc\xbaq\xd4UE\xf9\xe2\xa0*\x03Y\xd9\xca\xafH9\xb8*Z\x95\xbb\xa3\xdd\xd9\x10Y\a\xcf\xc2\xff\xc6\x00&\xb9\x00\x031\xc7d\xc9\xc6\xaf\x129\x1d\xf7t\x95\xd3k]\t\xf2\x053\xf9\x9d\xee\x18v\xc37') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:11 executing program 5: gettid() socket$unix(0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) clock_gettime(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) io_setup(0x23e243ee, &(0x7f0000000000)) io_getevents(0x0, 0x8a, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x40000, 0x0) r3 = semget$private(0x0, 0x0, 0x60) semctl$GETZCNT(r3, 0x3, 0xf, &(0x7f0000000200)=""/234) connect$caif(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = syz_open_dev$usb(0x0, 0x4, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000000180)=@abs, 0x6e) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="350928e8b07b9060af55acb50553571eaf54411b5eac635e0100000043fd611943550d178455aab830022a0a95dd8e4038707fecab2e6fbeb1f6b2c5e4683571629e5c3ab09bd73ac1b3caf89ce9c571dedb24489fb07b073084697bbb0e6ca18132bbf362ef3e562404aaa50aa1624675f9f8f3ec03e48c1eb1bc4ed4ba429b37587aae704ed5196c9c129acec06940bf746232beb35a092d18fdffffff7f443aee9a90d49db9ea5471f34f0a146c19fd168251e3791738c80e17064342810495526f65044d6d9f26ab2864422452e7695f9c194d4caadd01271c186180d0d21605df2c2efc25ee5e"], 0x1}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)="32970d54fa26dc9f7f00b75b778ff426156fafd8ec792539f3eda501cda19fa503889a1ca2b241a4dedb6ec2a2dda8aad927f643b3271f521a46666893d79826afd2321b4c53d9d64cb134e14e4d5d6a3cf18663346b140c4ef1987ba8718c0a2248c7a7a63be81625714054a3c7141b7b4504a12809d8cb2c45abb41fbfcefe79c9b3ca8af2d77204a40c8d04cb5a9fff3d00863bd3293f", 0x98, r7) 12:22:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00002cf2d2e06f7a3ae922360a5b4dbcc6281dfbae93cf4b35a70000000000fe80000000000000000000000000001e000000"], 0xb3}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 12:22:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00002cf2d2e06f7a3ae922360a5b4dbcc6281dfbae93cf4b35a70000000000fe80000000000000000000000000001e000000"], 0xb3}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 12:22:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00S\x9f\xe8\xd6Y\xc2\\\xaa\xc9\xf5{\a\x1e\x86[\b\x00a\xaf\xa4\x14\xec\xcd\x1a\r)X\xd1\xb4\xc4\xefm\x10Pc\xbaq\xd4UE\xf9\xe2\xa0*\x03Y\xd9\xca\xafH9\xb8*Z\x95\xbb\xa3\xdd\xd9\x10Y\a\xcf\xc2\xff\xc6\x00&\xb9\x00\x031\xc7d\xc9\xc6\xaf\x129\x1d\xf7t\x95\xd3k]\t\xf2\x053\xf9\x9d\xee\x18v\xc37') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00S\x9f\xe8\xd6Y\xc2\\\xaa\xc9\xf5{\a\x1e\x86[\b\x00a\xaf\xa4\x14\xec\xcd\x1a\r)X\xd1\xb4\xc4\xefm\x10Pc\xbaq\xd4UE\xf9\xe2\xa0*\x03Y\xd9\xca\xafH9\xb8*Z\x95\xbb\xa3\xdd\xd9\x10Y\a\xcf\xc2\xff\xc6\x00&\xb9\x00\x031\xc7d\xc9\xc6\xaf\x129\x1d\xf7t\x95\xd3k]\t\xf2\x053\xf9\x9d\xee\x18v\xc37') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:12 executing program 5: gettid() socket$unix(0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) clock_gettime(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) io_setup(0x23e243ee, &(0x7f0000000000)) io_getevents(0x0, 0x8a, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x40000, 0x0) r3 = semget$private(0x0, 0x0, 0x60) semctl$GETZCNT(r3, 0x3, 0xf, &(0x7f0000000200)=""/234) connect$caif(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = syz_open_dev$usb(0x0, 0x4, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000000180)=@abs, 0x6e) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="350928e8b07b9060af55acb50553571eaf54411b5eac635e0100000043fd611943550d178455aab830022a0a95dd8e4038707fecab2e6fbeb1f6b2c5e4683571629e5c3ab09bd73ac1b3caf89ce9c571dedb24489fb07b073084697bbb0e6ca18132bbf362ef3e562404aaa50aa1624675f9f8f3ec03e48c1eb1bc4ed4ba429b37587aae704ed5196c9c129acec06940bf746232beb35a092d18fdffffff7f443aee9a90d49db9ea5471f34f0a146c19fd168251e3791738c80e17064342810495526f65044d6d9f26ab2864422452e7695f9c194d4caadd01271c186180d0d21605df2c2efc25ee5e"], 0x1}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)="32970d54fa26dc9f7f00b75b778ff426156fafd8ec792539f3eda501cda19fa503889a1ca2b241a4dedb6ec2a2dda8aad927f643b3271f521a46666893d79826afd2321b4c53d9d64cb134e14e4d5d6a3cf18663346b140c4ef1987ba8718c0a2248c7a7a63be81625714054a3c7141b7b4504a12809d8cb2c45abb41fbfcefe79c9b3ca8af2d77204a40c8d04cb5a9fff3d00863bd3293f", 0x98, r7) 12:22:12 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x50) 12:22:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00002cf2d2e06f7a3ae922360a5b4dbcc6281dfbae93cf4b35a70000000000fe80000000000000000000000000001e000000"], 0xb3}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 12:22:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000e3ff0800333f220005001a0005040063000005d972d0eac659f9a70800cf78c2df2a05056bb747cf6300000000050000"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) 12:22:12 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0003000100401d85680c1baba20461659c", 0x24}], 0x1}, 0x0) 12:22:12 executing program 5: gettid() socket$unix(0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) clock_gettime(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) io_setup(0x23e243ee, &(0x7f0000000000)) io_getevents(0x0, 0x8a, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x40000, 0x0) r3 = semget$private(0x0, 0x0, 0x60) semctl$GETZCNT(r3, 0x3, 0xf, &(0x7f0000000200)=""/234) connect$caif(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = syz_open_dev$usb(0x0, 0x4, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000000180)=@abs, 0x6e) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="350928e8b07b9060af55acb50553571eaf54411b5eac635e0100000043fd611943550d178455aab830022a0a95dd8e4038707fecab2e6fbeb1f6b2c5e4683571629e5c3ab09bd73ac1b3caf89ce9c571dedb24489fb07b073084697bbb0e6ca18132bbf362ef3e562404aaa50aa1624675f9f8f3ec03e48c1eb1bc4ed4ba429b37587aae704ed5196c9c129acec06940bf746232beb35a092d18fdffffff7f443aee9a90d49db9ea5471f34f0a146c19fd168251e3791738c80e17064342810495526f65044d6d9f26ab2864422452e7695f9c194d4caadd01271c186180d0d21605df2c2efc25ee5e"], 0x1}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)="32970d54fa26dc9f7f00b75b778ff426156fafd8ec792539f3eda501cda19fa503889a1ca2b241a4dedb6ec2a2dda8aad927f643b3271f521a46666893d79826afd2321b4c53d9d64cb134e14e4d5d6a3cf18663346b140c4ef1987ba8718c0a2248c7a7a63be81625714054a3c7141b7b4504a12809d8cb2c45abb41fbfcefe79c9b3ca8af2d77204a40c8d04cb5a9fff3d00863bd3293f", 0x98, r7) 12:22:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000e3ff0800333f220005001a0005040063000005d972d0eac659f9a70800cf78c2df2a05056bb747cf6300000000050000"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) 12:22:12 executing program 5: gettid() socket$unix(0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) clock_gettime(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) io_setup(0x23e243ee, &(0x7f0000000000)) io_getevents(0x0, 0x8a, 0x2, &(0x7f0000000040)=[{}, {}], 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x40000, 0x0) r3 = semget$private(0x0, 0x0, 0x60) semctl$GETZCNT(r3, 0x3, 0xf, &(0x7f0000000200)=""/234) connect$caif(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = syz_open_dev$usb(0x0, 0x4, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f0000000180)=@abs, 0x6e) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="350928e8b07b9060af55acb50553571eaf54411b5eac635e0100000043fd611943550d178455aab830022a0a95dd8e4038707fecab2e6fbeb1f6b2c5e4683571629e5c3ab09bd73ac1b3caf89ce9c571dedb24489fb07b073084697bbb0e6ca18132bbf362ef3e562404aaa50aa1624675f9f8f3ec03e48c1eb1bc4ed4ba429b37587aae704ed5196c9c129acec06940bf746232beb35a092d18fdffffff7f443aee9a90d49db9ea5471f34f0a146c19fd168251e3791738c80e17064342810495526f65044d6d9f26ab2864422452e7695f9c194d4caadd01271c186180d0d21605df2c2efc25ee5e"], 0x1}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)="32970d54fa26dc9f7f00b75b778ff426156fafd8ec792539f3eda501cda19fa503889a1ca2b241a4dedb6ec2a2dda8aad927f643b3271f521a46666893d79826afd2321b4c53d9d64cb134e14e4d5d6a3cf18663346b140c4ef1987ba8718c0a2248c7a7a63be81625714054a3c7141b7b4504a12809d8cb2c45abb41fbfcefe79c9b3ca8af2d77204a40c8d04cb5a9fff3d00863bd3293f", 0x98, r7) [ 658.576809][T28157] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:22:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00002cf2d2e06f7a3ae922360a5b4dbcc6281dfbae93cf4b35a70000000000fe80000000000000000000000000001e000000"], 0xb3}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 12:22:12 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0003000100401d85680c1baba20461659c", 0x24}], 0x1}, 0x0) [ 658.774420][ C0] net_ratelimit: 16 callbacks suppressed [ 658.774428][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 658.785965][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:12 executing program 2: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000e3ff0800333f220005001a0005040063000005d972d0eac659f9a70800cf78c2df2a05056bb747cf6300000000050000"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) [ 658.842788][T28174] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:22:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x74}}}) 12:22:12 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0003000100401d85680c1baba20461659c", 0x24}], 0x1}, 0x0) 12:22:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 12:22:13 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0003000100401d85680c1baba20461659c", 0x24}], 0x1}, 0x0) [ 659.257532][T28196] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:22:13 executing program 0: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0x7, 0x25b) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)) 12:22:13 executing program 2: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000e3ff0800333f220005001a0005040063000005d972d0eac659f9a70800cf78c2df2a05056bb747cf6300000000050000"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) 12:22:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'dummy0\x00'}, 0x18) 12:22:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'yd\x03\x00', 0x43732e5398416f17}) 12:22:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="373a3309742be6c6d0c3f0b89042f922f7f5103ac7d45a1798681898cdffaf"], 0x1f) 12:22:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000e3ff0800333f220005001a0005040063000005d972d0eac659f9a70800cf78c2df2a05056bb747cf6300000000050000"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) [ 659.414419][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 659.420258][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:13 executing program 2: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000040)) 12:22:13 executing program 0: r0 = socket$inet6(0x10, 0x10000000002, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c02030000001900154000030000000022dc1338d54400009b84136ef75afb83de4411000b00c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 12:22:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12:22:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 12:22:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'yd\x03\x00', 0x43732e5398416f17}) 12:22:13 executing program 0: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) execve(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 12:22:13 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 12:22:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x4000100320}) 12:22:13 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 659.895230][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 659.901080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 660.214376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 660.220232][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 660.226064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 660.231810][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a040007000000e3ff0800333f220005001a0005040063000005d972d0eac659f9a70800cf78c2df2a05056bb747cf6300000000050000"], 0x38}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) 12:22:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 12:22:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100070c10000000000001400000", 0x58}], 0x1) 12:22:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'yd\x03\x00', 0x43732e5398416f17}) 12:22:14 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1}) 12:22:14 executing program 2: syz_execute_func(&(0x7f0000000500)="6144e131692f0f9df40c3e27c4e2bdaee8260f380474c467cd801b69e46962f5696200d9d955901090100a00000f78fa1cc1f08fe9589b2626d8d3427d82dfdfe4dac4c25d074b0007168f4808eebce00000802000c421650fd35cb8b0ce3666f3e1dcdcf17d73fac4c1dd606802fcc4c17c5bad010000000f880b0000000601c2c4e3e95cdf09f265dc7f10c3da45f5f20f0fcf90d9cef2d9232c24a12e4409566c82333d0640c401660f3a63a800000100ff646736676666430fefb30000000072f23e660f38311c8b0f0d0f86452f9fd4f3d9f916af141123d833d5160f18f5") 12:22:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xd}]}}}]}, 0x3c}}, 0x0) 12:22:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000080)={0x94, 0x0, [0xfdfdffff]}) 12:22:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) write$FUSE_DIRENT(r0, 0x0, 0x0) 12:22:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) [ 660.563810][T28272] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 12:22:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'yd\x03\x00', 0x43732e5398416f17}) 12:22:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 12:22:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) write$FUSE_DIRENT(r0, 0x0, 0x0) 12:22:15 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_proto_private(r1, 0x0, 0x0) 12:22:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) 12:22:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) 12:22:15 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623690400080004000c0816000b0000007a38fce6d63c9965afdc1338d54400009b84136ef75afb83de448daa7227c43ab8", 0x4b}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x4924b4c, 0x0) 12:22:15 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) write$FUSE_DIRENT(r0, 0x0, 0x0) [ 661.265321][T28301] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 661.277952][T28308] Unknown ioctl 0 [ 661.298991][T28311] Unknown ioctl 0 12:22:15 executing program 2: write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2276, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x100000000000010b) getsockname(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x6f, 0xfffffffffffffff8, 0x1, "b695ebc139d52880b434d64d2ea6ed7f91818e583d90e7e4948e8ada47eeb72c48b691ccb117984bea76749ed03c34a1892e2b95c33da1b50f87e366fe5c99cbde2e170821c4a99b9658be46c3482a5e740451e8ba5bdd17ff15e502a995fbb0e3f2952e464421b3f923f889d18088"}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) read$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) 12:22:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) [ 661.317314][T28301] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. 12:22:15 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x220000, 0x0) sendto$unix(r0, &(0x7f0000000140)="3b1484a336c9e36afa43", 0xa, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340)) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x100000, 0x40000) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) 12:22:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) [ 661.702961][ T26] audit: type=1804 audit(1558441335.739:45): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/811/file0/bus" dev="ramfs" ino=126466 res=1 12:22:15 executing program 2: syz_execute_func(&(0x7f00000001c0)="1c7fb5b598cd801b69e4c4c211af106962f5696200d9d9d0c42e17795bf9f9680c0000008fe9589b26c7e4c753fbc4e101edfec4427d822a2a00c4c4c2b90a23f2168f4808eebce00000802000c422b18cb6070000005151c4a27d181ec1ea01eff265dc5f00c35b5b45363ef80f9966030faee42c240f54635bdedec4a1e1e0ef26400f0d18c401fe5ff6e30fad4336660fd2938c000000c4c1f913376666450f17720d2e440fc7bf0d0000801d54111d00") 12:22:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) [ 661.867292][T28336] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 661.954786][T28336] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. 12:22:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) write$FUSE_DIRENT(r0, 0x0, 0x0) 12:22:16 executing program 0: syz_execute_func(&(0x7f0000000800)="6114dc1cc7e1e1b698cd801b86ecf5696287696200d9c4c1a5769a8303000200004139aef91c818fe9589b2667a10101fec5c4c31546d0057d820a7f0fba650ade76f2fb1ec4e211af3976de7b7be00000802000ddddc4e1f91058bc8fe950939b9b000000c1ea48efe1f4f2003c193637dcf84c37c4e17b2d9e000800006d3131a10f56b65fb4e1e600c4e17969ccc50153fe1de68b49dfcfd1a6cf64a66666430fefb3000000c0010150314f86c4e2519a0be086b5ee0fee0f0f0d660fc4e29903d6f26f") 12:22:16 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) 12:22:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x24, 0x29, 0x39, "21020201cb933d15fe800000000000009facf935c5"}], 0x24}, 0x0) 12:22:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='cgroup.max.depth\x00', 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)='k', 0x1}], 0x1) [ 662.276100][ T26] audit: type=1804 audit(1558441336.319:46): pid=28346 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/811/file0/file0/bus" dev="ramfs" ino=126509 res=1 12:22:16 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) write$FUSE_DIRENT(r0, 0x0, 0x0) 12:22:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:16 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x220000, 0x0) sendto$unix(r0, &(0x7f0000000140)="3b1484a336c9e36afa43", 0xa, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340)) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x100000, 0x40000) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) 12:22:16 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0x0, 0x80003, 0x2, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$mice(0x0, 0x0, 0x400000) unshare(0x40000000) 12:22:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) [ 662.927023][T28382] IPVS: ftp: loaded support on port[0] = 21 [ 663.001703][ T26] audit: type=1804 audit(1558441337.039:47): pid=28385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/812/file0/bus" dev="ramfs" ino=127625 res=1 12:22:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) write$FUSE_DIRENT(r0, 0x0, 0x0) 12:22:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:17 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) write$FUSE_DIRENT(r0, 0x0, 0x0) [ 663.538933][T28408] IPVS: ftp: loaded support on port[0] = 21 12:22:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:17 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x220000, 0x0) sendto$unix(r0, &(0x7f0000000140)="3b1484a336c9e36afa43", 0xa, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340)) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x100000, 0x40000) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) 12:22:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) [ 664.064371][ C1] net_ratelimit: 14 callbacks suppressed [ 664.064379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.075888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 664.128341][ T26] audit: type=1804 audit(1558441338.169:48): pid=28432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/813/file0/bus" dev="ramfs" ino=127740 res=1 [ 664.384877][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.391056][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 664.397706][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.403892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 665.015801][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 665.021641][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:19 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0x0, 0x80003, 0x2, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$mice(0x0, 0x0, 0x400000) unshare(0x40000000) 12:22:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:19 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x220000, 0x0) sendto$unix(r0, &(0x7f0000000140)="3b1484a336c9e36afa43", 0xa, 0x4000000, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000340)) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x208200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x100000, 0x40000) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x20) [ 665.654418][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 665.660329][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 665.679183][ T26] audit: type=1804 audit(1558441339.719:49): pid=28450 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/814/file0/bus" dev="ramfs" ino=127800 res=1 12:22:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) [ 665.704697][T28455] IPVS: ftp: loaded support on port[0] = 21 12:22:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:20 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0x0, 0x80003, 0x2, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$mice(0x0, 0x0, 0x400000) unshare(0x40000000) 12:22:20 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0x0, 0x80003, 0x2, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$mice(0x0, 0x0, 0x400000) unshare(0x40000000) 12:22:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x4000, 0x46, &(0x7f0000ff9000/0x4000)=nil) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) r6 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000003c0)='posix_acl_access\x00'}, 0x30) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0xc) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000200)=0x5) ioctl$TIOCGSID(r10, 0x5429, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f00000001c0)={&(0x7f0000000100)=""/145, 0x91}) write$cgroup_int(r10, &(0x7f0000000640)=0x7, 0x12) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x1, r2, r3, r5, r6, 0x20, 0x1000}, 0x2, 0x1, 0x9, 0x200, r7, r12}) flock(r10, 0x4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000000)={0x40, @tick=0x5, 0x1, {0x7, 0x2}, 0x0, 0x0, 0x4}) r15 = shmget(0x3, 0x3000, 0x484, &(0x7f0000ffa000/0x3000)=nil) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000540)={0xffff, 0xa, 0xa, "2b7e097641ba861df169674285b3e77b5667f473e10817e7da901574d703dea9857e09fa214efa035783b4385e497bd44bffe56206679fd65416cbc6", 0x14, "064aafba801ca0abb67c4f3a1f9347821126ff631b0dbe37031f315009524fb794eef5924b4ace71d15189e6459e7561e57f1da954d458a85bb4d81c", 0x90}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000500)={'vcan0\x00', r4}) shmctl$SHM_UNLOCK(r15, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r14, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\xbdjX\xed\xf8I\xc4\xd0\x00', 0x100000000}) 12:22:20 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000180)='}trustedsecuritysystem@\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f0000000140), 0x8) 12:22:20 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0x0, 0x0) 12:22:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000012000)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) [ 666.697262][T28494] IPVS: ftp: loaded support on port[0] = 21 [ 666.803654][T28502] IPVS: ftp: loaded support on port[0] = 21 [ 666.882191][T28507] netlink: 'syz-executor.1': attribute type 9 has an invalid length. 12:22:21 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd}}) 12:22:21 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000000000000000aab40003"], 0x11) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 12:22:21 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) [ 667.079849][T28517] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. 12:22:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xfff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0xf010000, 0x0, 0x0, [0x40000], 0x0}) 12:22:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) [ 669.174403][ C0] net_ratelimit: 16 callbacks suppressed [ 669.174412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.185960][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:23 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0x0, 0x80003, 0x2, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$mice(0x0, 0x0, 0x400000) unshare(0x40000000) 12:22:23 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 12:22:23 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'hss0\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES64=r0, @ANYRESDEC]]}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0xfffffffffffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000640)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000380)='\x00') r3 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) io_setup(0x2, 0x0) io_destroy(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r3, r2, 0x0, 0x2000005) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000002c0)=0x7) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) 12:22:23 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000306ff00fd4354c007110000f3e9000008001100010423dcffdf00", 0x1f) 12:22:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x10) 12:22:23 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0x0, 0x80003, 0x2, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$mice(0x0, 0x0, 0x400000) unshare(0x40000000) [ 669.795978][T28545] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.815047][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.821323][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0xffffff91) [ 669.954615][T28554] input: syz1 as /devices/virtual/input/input76 [ 669.974136][T28543] IPVS: ftp: loaded support on port[0] = 21 12:22:24 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000306ff00fd4354c007110000f3e9000008001100010423dcffdf00", 0x1f) [ 670.025598][T28551] IPVS: ftp: loaded support on port[0] = 21 12:22:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x6827, 0x0, 0x0, 0x0, 0x2]}, 0x45c) [ 670.201701][T28565] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 12:22:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu///z0\xf6', 0x1ff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x4, 0x81, 0x8, 0x3, 0x1, 0xff, 0x20, 0x400]}) fsync(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) prctl$PR_SET_FPEMU(0xa, 0x2) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) creat(&(0x7f0000000040)='./file0\x00', 0x20) ftruncate(r1, 0x100000001) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)=0x1) [ 670.294371][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 670.300199][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:24 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000306ff00fd4354c007110000f3e9000008001100010423dcffdf00", 0x1f) [ 670.410991][T28571] input: syz1 as /devices/virtual/input/input77 12:22:24 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) [ 670.560178][T28579] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.614417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 670.620290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 670.626138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 670.626180][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 670.658908][T28577] QAT: Invalid ioctl [ 670.785759][T28577] QAT: Invalid ioctl [ 670.816169][T28580] QAT: Invalid ioctl [ 670.926752][T28583] input: syz1 as /devices/virtual/input/input80 12:22:26 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000306ff00fd4354c007110000f3e9000008001100010423dcffdf00", 0x1f) 12:22:26 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 12:22:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu///z0\xf6', 0x1ff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x4, 0x81, 0x8, 0x3, 0x1, 0xff, 0x20, 0x400]}) fsync(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) prctl$PR_SET_FPEMU(0xa, 0x2) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) creat(&(0x7f0000000040)='./file0\x00', 0x20) ftruncate(r1, 0x100000001) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)=0x1) 12:22:26 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 12:22:26 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0x0, 0x80003, 0x2, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) syz_open_dev$mice(0x0, 0x0, 0x400000) unshare(0x40000000) 12:22:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu///z0\xf6', 0x1ff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x4, 0x81, 0x8, 0x3, 0x1, 0xff, 0x20, 0x400]}) fsync(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) prctl$PR_SET_FPEMU(0xa, 0x2) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) creat(&(0x7f0000000040)='./file0\x00', 0x20) ftruncate(r1, 0x100000001) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)=0x1) [ 672.810720][T28605] QAT: Invalid ioctl [ 672.814527][T28604] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 672.881769][T28600] IPVS: ftp: loaded support on port[0] = 21 [ 672.917230][T28607] QAT: Invalid ioctl 12:22:27 executing program 3: syz_execute_func(&(0x7f0000000840)="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") [ 673.018380][T28605] QAT: Invalid ioctl 12:22:27 executing program 3: clone(0x2000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) [ 673.151159][T28607] QAT: Invalid ioctl 12:22:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu///z0\xf6', 0x1ff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x4, 0x81, 0x8, 0x3, 0x1, 0xff, 0x20, 0x400]}) fsync(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) prctl$PR_SET_FPEMU(0xa, 0x2) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) creat(&(0x7f0000000040)='./file0\x00', 0x20) ftruncate(r1, 0x100000001) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)=0x1) 12:22:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu///z0\xf6', 0x1ff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x4, 0x81, 0x8, 0x3, 0x1, 0xff, 0x20, 0x400]}) fsync(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) prctl$PR_SET_FPEMU(0xa, 0x2) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) creat(&(0x7f0000000040)='./file0\x00', 0x20) ftruncate(r1, 0x100000001) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)=0x1) [ 673.255588][T28602] input: syz1 as /devices/virtual/input/input81 12:22:27 executing program 3: clone(0x2000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) [ 673.485948][T28603] input: syz1 as /devices/virtual/input/input82 [ 673.559558][T28627] QAT: Invalid ioctl [ 673.599292][T28622] QAT: Invalid ioctl 12:22:27 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 12:22:27 executing program 3: clone(0x2000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) [ 673.777188][T28627] QAT: Invalid ioctl 12:22:27 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) [ 673.801473][T28622] QAT: Invalid ioctl 12:22:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu///z0\xf6', 0x1ff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x4, 0x81, 0x8, 0x3, 0x1, 0xff, 0x20, 0x400]}) fsync(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) prctl$PR_SET_FPEMU(0xa, 0x2) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) creat(&(0x7f0000000040)='./file0\x00', 0x20) ftruncate(r1, 0x100000001) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)=0x1) 12:22:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu///z0\xf6', 0x1ff) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x4, 0x81, 0x8, 0x3, 0x1, 0xff, 0x20, 0x400]}) fsync(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) prctl$PR_SET_FPEMU(0xa, 0x2) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x7) creat(&(0x7f0000000040)='./file0\x00', 0x20) ftruncate(r1, 0x100000001) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000400)=""/4096, &(0x7f0000000200)=0x1000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000240)=0x1) 12:22:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00\x00\x9e\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 12:22:28 executing program 3: clone(0x2000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) [ 674.118561][T28647] QAT: Invalid ioctl [ 674.123559][T28655] bond0: cannot enslave bond to itself. [ 674.140699][T28651] QAT: Invalid ioctl 12:22:28 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="24000000190007041dfffd946f6105000a0000001f00000000000800080015000404ff7e", 0x24}], 0x1}, 0x0) [ 674.188221][T28637] input: syz1 as /devices/virtual/input/input83 12:22:28 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0x0, 0x0, 'client0\x00', 0x0, "8f8d2416e0ceab2b", "96726cad19039fec3da07cff321199e1b05bda077333210f3779311b67b62a70", 0x0, 0xa33a}) ioctl$VIDIOC_CROPCAP(r0, 0xc0cc5640, &(0x7f0000000040)={0xa}) [ 674.360939][T28668] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 674.368392][T28647] QAT: Invalid ioctl 12:22:28 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = dup(r0) getpeername$inet6(r1, 0x0, 0x0) [ 674.454796][ C1] net_ratelimit: 14 callbacks suppressed [ 674.454842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 674.463147][T28651] QAT: Invalid ioctl [ 674.467465][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) 12:22:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) [ 674.527206][T28673] input: syz1 as /devices/virtual/input/input84 12:22:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x502, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x8001, 0x0, 0x0, "0000e1d1ea0000000000000000afa68a69da0000000000000000000800"}) 12:22:28 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) [ 674.774377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 674.780250][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 674.786219][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 674.791985][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:29 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r3, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000000)=0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 12:22:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)) getdents(r0, &(0x7f0000000100)=""/252, 0xfc) 12:22:29 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) getdents64(r0, &(0x7f0000000100)=""/198, 0xc6) 12:22:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) 12:22:29 executing program 2: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x3, 0xa0) io_uring_setup(0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r0}}, 0x18) 12:22:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) 12:22:29 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000003c0)=0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 12:22:29 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044149, &(0x7f0000000000)) 12:22:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) 12:22:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 675.414378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 675.420283][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) [ 675.659953][T28710] input: syz1 as /devices/virtual/input/input85 12:22:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 12:22:29 executing program 2: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:29 executing program 1: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:29 executing program 5: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:29 executing program 0: syz_open_dev$vcsa(&(0x7f0000001680)='/dev/vcsa#\x00', 0x4, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) execveat(r0, 0x0, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 12:22:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) [ 676.054371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 676.060212][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x100}}) 12:22:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 12:22:30 executing program 5: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:30 executing program 0: syz_open_dev$vcsa(&(0x7f0000001680)='/dev/vcsa#\x00', 0x4, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) execveat(r0, 0x0, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 12:22:30 executing program 2: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:30 executing program 4: r0 = io_uring_setup(0x64, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 12:22:30 executing program 1: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:30 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='tmpfs\x00\x17\xeb\xc6z\nRn\xcdo\x14\xad_\xa7\xa8\x00\xe3|p\xb9\x86o\r\xb0\xef\t\xe4\x1ayFZxO\x8b\x0e\xe4\x11\xc0\x9f\xd8m!j,\xd5\xa7\xa0:\rX\f\xfc\x86\x89\xf1\x8d\x83\x85_\xb7\xe7\x03\xcf\xb1\x882\xd3\xfc\xc0njA\x03\x00\x00\x00\xd7\xf8\xb2\xaaJI\x83\x96\x12\xa6TWn\x01kr\xfd\x01I;\x19\xde\xee\xa4R\xa9\x89\xc3\xaa|\x12\x85}\n\xf8\xc2&\xbaQ$\xd8d&\x7f\x90b\xcf\x99VW\xae\xb7\xb6Y\x00\xcb\xf4i\x7f,\\/\x8d\f\x9c)a\xe4\xc5\xab\x9f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x1) 12:22:31 executing program 5: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'br\x00\x00\xff\x03\x00\x00\x00\x00\xef\xff^0\x00', 0x8000000005ff}) 12:22:31 executing program 0: syz_open_dev$vcsa(&(0x7f0000001680)='/dev/vcsa#\x00', 0x4, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) execveat(r0, 0x0, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 12:22:31 executing program 1: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:31 executing program 2: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x2000) syz_execute_func(&(0x7f0000000000)="0c0dd52b98cd801b69e4e4629b66660f38de3e5c6200d9d9660fee15000000000f01db385f5bf96564c0dd1ab93db93d8fe9589b26e30cc4c215b9cc9cedb2ab3cedab2ef30fbd847acc2200005f6a3c908fe840ed8ac61954f685c4c1c96b34eb9f65c565f2738177770080c4c3dd6d680748515101c4afaf9b129f9b9f9b0000d1ea11eff265dc5fd905c3c3c4c121df670445363ef8056366030faee42c6566c0361a5e5bf47500000f10eb0f0d188fc9909a6d0067ff4edee3dfd2938c0000000f01c33ef26f1411") ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3ff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8005) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) 12:22:31 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x72, &(0x7f0000000000)=""/236, &(0x7f0000000100)=0xec) 12:22:31 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r1, 0x0, 0x0, 0x1}}, 0x20) 12:22:31 executing program 0: syz_open_dev$vcsa(&(0x7f0000001680)='/dev/vcsa#\x00', 0x4, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) execveat(r0, 0x0, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 12:22:31 executing program 3: r0 = userfaultfd(0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x12\x001\xc5\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 12:22:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/81) 12:22:32 executing program 1: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext}) r0 = memfd_create(&(0x7f0000000340)='user}\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 12:22:32 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x408000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) r3 = getegid() ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) timerfd_gettime(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x1) 12:22:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x3, 0x6, 0x5, 0x0, 'wlan1'}}, 0x2e) seccomp(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$usb(0x0, 0x3, 0x8000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x101000000000009) 12:22:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) getgroups(0x8, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xee00]) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, r6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000fd], 0x1f004}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 12:22:32 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x408000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) r3 = getegid() ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) timerfd_gettime(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x1) [ 678.278072][ T26] audit: type=1326 audit(1558441352.319:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28855 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7ffb849 code=0x0 12:22:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 12:22:32 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x8, 0x47e) 12:22:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 12:22:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) getgroups(0x8, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xee00]) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, r6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000fd], 0x1f004}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 12:22:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 12:22:33 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x408000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) r3 = getegid() ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) timerfd_gettime(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x1) 12:22:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) [ 679.059128][ T26] audit: type=1326 audit(1558441353.099:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28855 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7ffb849 code=0x0 12:22:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x3, 0x6, 0x5, 0x0, 'wlan1'}}, 0x2e) seccomp(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$usb(0x0, 0x3, 0x8000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x101000000000009) 12:22:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) getgroups(0x8, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xee00]) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, r6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000fd], 0x1f004}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 12:22:33 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1) 12:22:33 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x8, 0x47e) [ 679.315763][ T26] audit: type=1326 audit(1558441353.349:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7ffb849 code=0x0 12:22:33 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x408000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) r3 = getegid() ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) timerfd_gettime(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x1) 12:22:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x8, 0x18, @binary='5'}]}, 0x1c}}, 0x0) [ 679.592357][ C0] net_ratelimit: 16 callbacks suppressed [ 679.592366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 679.603910][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:33 executing program 0: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x159b, 0xe, &(0x7f0000000080), 0x8) 12:22:33 executing program 0: rt_sigaction(0x9, &(0x7f0000000200)={0x0, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) 12:22:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) getgroups(0x8, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xee00]) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, r6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000fd], 0x1f004}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 12:22:34 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x408000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) r3 = getegid() ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) timerfd_gettime(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x1) 12:22:34 executing program 0: r0 = socket$inet(0x2, 0x100000000805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x6d, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 12:22:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x3, 0x6, 0x5, 0x0, 'wlan1'}}, 0x2e) seccomp(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$usb(0x0, 0x3, 0x8000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x101000000000009) [ 680.214361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.220469][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:34 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x8, 0x47e) [ 680.306982][ T26] audit: type=1326 audit(1558441354.339:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7ffb849 code=0x0 12:22:34 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @loopback=0xac1414e0}]}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x6, 0x9, 0x1, r1}, &(0x7f00000000c0)=0x10) 12:22:34 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x408000, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) r3 = getegid() ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) timerfd_gettime(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x1) 12:22:34 executing program 0: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00'}) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r2}) fcntl$addseals(r0, 0x409, 0x0) 12:22:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 680.694881][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 680.701211][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:34 executing program 0: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00'}) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r2}) fcntl$addseals(r0, 0x409, 0x0) 12:22:34 executing program 3: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00'}) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r2}) fcntl$addseals(r0, 0x409, 0x0) 12:22:35 executing program 0: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00'}) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r2}) fcntl$addseals(r0, 0x409, 0x0) [ 681.024381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 681.030244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 681.036113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 681.041893][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x3, 0x6, 0x5, 0x0, 'wlan1'}}, 0x2e) seccomp(0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$usb(0x0, 0x3, 0x8000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x101000000000009) 12:22:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00'}) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r2}) fcntl$addseals(r0, 0x409, 0x0) 12:22:35 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000140)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x8, 0x47e) 12:22:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x400000008004e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x17) 12:22:35 executing program 0: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00'}) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r2}) fcntl$addseals(r0, 0x409, 0x0) [ 681.293898][ T26] audit: type=1326 audit(1558441355.329:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28988 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7ffb849 code=0x0 12:22:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000440)="ce841000fa13000400910efc1fb35c22cc6dc3798c21493fe155208f80000400257faf5ec2cc0542627d5a8b2e9b64c47af6363bbd84500000000080000001b3f60bf13d6418dee371cf1e14174db877f0fc7205", 0x54, 0x0, 0x0, 0x0) 12:22:35 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:22:35 executing program 3: r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'bond_slave_0\x00'}) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x200000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r2}) fcntl$addseals(r0, 0x409, 0x0) 12:22:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000440)="ce841000fa13000400910efc1fb35c22cc6dc3798c21493fe155208f80000400257faf5ec2cc0542627d5a8b2e9b64c47af6363bbd84500000000080000001b3f60bf13d6418dee371cf1e14174db877f0fc7205", 0x54, 0x0, 0x0, 0x0) 12:22:35 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbe8", 0x38, 0x3a, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x60000000, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @mcast2, @loopback, [], "fca967e17f791010"}}}}}}}, 0x0) 12:22:35 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:22:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000440)="ce841000fa13000400910efc1fb35c22cc6dc3798c21493fe155208f80000400257faf5ec2cc0542627d5a8b2e9b64c47af6363bbd84500000000080000001b3f60bf13d6418dee371cf1e14174db877f0fc7205", 0x54, 0x0, 0x0, 0x0) 12:22:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:22:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r0, &(0x7f0000000440)="ce841000fa13000400910efc1fb35c22cc6dc3798c21493fe155208f80000400257faf5ec2cc0542627d5a8b2e9b64c47af6363bbd84500000000080000001b3f60bf13d6418dee371cf1e14174db877f0fc7205", 0x54, 0x0, 0x0, 0x0) 12:22:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 12:22:36 executing program 3: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000500), 0x0, 0x0, 0x8) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x16, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}) 12:22:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:22:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x400300, 0x4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}]}, 0x50}}, 0x0) 12:22:36 executing program 4: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x400c55cb, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$KVM_SMI(r1, 0xaeb7) getpgrp(0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080), 0x0) close(r4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x22200, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f0000000100)=""/39) 12:22:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 12:22:36 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:22:36 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x120401, 0x0) 12:22:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x5, 0x0, 0x0, 0xff000000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 12:22:36 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:22:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 12:22:36 executing program 1: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) prctl$PR_CAPBSET_DROP(0x18, 0x0) 12:22:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000180)='Y'}) 12:22:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001780)={'syz_tun\x00\x00\x00\x00\x00\x01\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 12:22:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000003c0), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) 12:22:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20000501}}, 0x0) 12:22:37 executing program 4: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x400c55cb, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$KVM_SMI(r1, 0xaeb7) getpgrp(0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080), 0x0) close(r4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x22200, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f0000000100)=""/39) 12:22:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x0) 12:22:37 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 12:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000008640)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) 12:22:37 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x3, 0x0, @remote}, 0x10, 0x0}, 0x0) 12:22:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:22:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/63) 12:22:37 executing program 1: socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x1a480, 0x0) fchmodat(r0, 0x0, 0x40000000004e) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 12:22:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x2, &(0x7f0000000100)) 12:22:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000008640)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) 12:22:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000008640)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) [ 683.803091][T29123] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.811104][T29123] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.890257][T29123] device bridge0 left promiscuous mode 12:22:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20000501}}, 0x0) 12:22:38 executing program 4: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x400c55cb, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$KVM_SMI(r1, 0xaeb7) getpgrp(0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080), 0x0) close(r4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x22200, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f0000000100)=""/39) 12:22:38 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x200040000000002}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 12:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000008640)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) 12:22:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20000501}}, 0x0) 12:22:38 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x200040000000002}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 12:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000008640)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) 12:22:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000008640)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) [ 684.749531][T29129] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.756700][T29129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.764110][T29129] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.771256][T29129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.854365][ C1] net_ratelimit: 14 callbacks suppressed [ 684.854375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 684.865930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 684.907065][T29129] device bridge0 entered promiscuous mode [ 684.942569][T29158] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.949860][T29158] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.053622][T29158] device bridge0 left promiscuous mode [ 685.174394][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 685.180229][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 685.186115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 685.191904][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:22:39 executing program 1: socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x1a480, 0x0) fchmodat(r0, 0x0, 0x40000000004e) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 12:22:39 executing program 3: clock_gettime(0x0, &(0x7f0000000280)={0x0}) futex(&(0x7f000000cffc)=0x200000001, 0x8b, 0x1, &(0x7f0000000040)={r0}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 12:22:39 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x200040000000002}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 12:22:39 executing program 4: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x400c55cb, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$KVM_SMI(r1, 0xaeb7) getpgrp(0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) listen(r0, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080), 0x0) close(r4) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x22200, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f0000000100)=""/39) 12:22:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f000000ca80)=[{{0x0, 0x0, &(0x7f0000009780)=[{&(0x7f0000008640)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) [ 685.414974][T29181] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.422350][T29181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.430648][T29181] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.438093][T29181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.499261][T29181] device bridge0 entered promiscuous mode 12:22:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x20000501}}, 0x0) 12:22:39 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x200040000000002}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 12:22:39 executing program 1: socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x1a480, 0x0) fchmodat(r0, 0x0, 0x40000000004e) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 685.814366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 685.820238][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:39 executing program 0: pipe(0x0) r0 = syz_open_procfs(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) recvmsg(0xffffffffffffff9c, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa000, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 685.910794][T29193] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.918569][T29193] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.975875][T29193] device bridge0 left promiscuous mode 12:22:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x800000005, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filte\x00'}, &(0x7f0000000100)=0x54) 12:22:40 executing program 0: pipe(0x0) r0 = syz_open_procfs(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) recvmsg(0xffffffffffffff9c, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa000, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:22:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x800000005, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filte\x00'}, &(0x7f0000000100)=0x54) 12:22:40 executing program 3: clock_gettime(0x0, &(0x7f0000000280)={0x0}) futex(&(0x7f000000cffc)=0x200000001, 0x8b, 0x1, &(0x7f0000000040)={r0}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 12:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x4000009f]}) 12:22:40 executing program 0: pipe(0x0) r0 = syz_open_procfs(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) recvmsg(0xffffffffffffff9c, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa000, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:22:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x800000005, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filte\x00'}, &(0x7f0000000100)=0x54) [ 686.454377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.460243][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:22:40 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) syz_genetlink_get_family_id$tipc2(0x0) 12:22:40 executing program 0: pipe(0x0) r0 = syz_open_procfs(0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) recvmsg(0xffffffffffffff9c, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40086410, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa000, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r1, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:22:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x800000005, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filte\x00'}, &(0x7f0000000100)=0x54) [ 687.002519][T29198] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.009709][T29198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.017171][T29198] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.024321][T29198] bridge0: port 1(bridge_slave_0) entered forwarding state 12:22:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300090417feb1ae7aa77cf40000ff3f0200000000000000000010141900040043010000000000000000e91ed838d2fd0000000100", 0x39}], 0x1) 12:22:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) io_setup(0xc01, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x659c, 0x1000000, 0x0, 0x800000000005, 0x0, r0, 0x0}]) 12:22:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x5) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000003, 0x2012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) 12:22:41 executing program 1: socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x1a480, 0x0) fchmodat(r0, 0x0, 0x40000000004e) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 12:22:41 executing program 0: semget$private(0x0, 0x3, 0x141) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in6}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x800000000000, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet(0xa, 0x3, 0xb) r2 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001340)="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") syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x2) [ 687.069574][T29198] device bridge0 entered promiscuous mode 12:22:41 executing program 3: clock_gettime(0x0, &(0x7f0000000280)={0x0}) futex(&(0x7f000000cffc)=0x200000001, 0x8b, 0x1, &(0x7f0000000040)={r0}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 12:22:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)={0x80, 0x0, 0x263}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 687.151857][T29253] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 12:22:41 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000000), 0x4) 12:22:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) ioctl$PPPOEIOCSFWD(r2, 0x4004b100, 0x0) 12:22:41 executing program 5: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) [ 687.624260][T29276] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.631900][T29276] bridge0: port 1(bridge_slave_0) entered disabled state 12:22:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) ioctl$PPPOEIOCSFWD(r2, 0x4004b100, 0x0) 12:22:41 executing program 0: semget$private(0x0, 0x3, 0x141) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in6}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x800000000000, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet(0xa, 0x3, 0xb) r2 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001340)="ba1a933a7f0c03fbbbdd69951eb5c14697f96dac8b62195b53cd29092c2e16fdf6d3286e3c4919e7b4e6171c221d142029989ed8326bffec78b5dd4e6f224098d7fefc373feea4f5448ba2cd5d388f6ed52bcdb0809c1a9ff4904c51a3d184050974872249637d559d46a37feac5e2125a3e81fc5d3ade26a28f0eacea63d4f9120f445f8ae350de046388fa0be681984ec94dddd2602814c75fc6476e5aee6c572e66baa0f81650bad83d5b05b922c6e760bb876dbf70606c63b634fe002ad535283aeab71425e0e9149062ce3798442159a9abf9cc08ebd32ee7dcefe5f6824c4d0bc7bdb750bb0760d5ca4d641e2a4df613ba8563af1936029a9790230cf6") syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x2) [ 687.692287][T29276] device bridge0 left promiscuous mode 12:22:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)={0x80, 0x0, 0x263}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 687.955076][T29284] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 687.998871][T29284] CPU: 0 PID: 29284 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 688.006897][T29284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.016961][T29284] Call Trace: [ 688.020283][T29284] dump_stack+0x172/0x1f0 [ 688.024646][T29284] dump_header+0x10f/0xb6c [ 688.030204][T29284] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 688.036015][T29284] ? ___ratelimit+0x60/0x595 [ 688.040613][T29284] ? do_raw_spin_unlock+0x57/0x270 [ 688.045739][T29284] oom_kill_process.cold+0x10/0x15 [ 688.050863][T29284] out_of_memory+0x79a/0x1280 [ 688.055547][T29284] ? __sched_text_start+0x8/0x8 [ 688.060409][T29284] ? oom_killer_disable+0x280/0x280 [ 688.065617][T29284] mem_cgroup_out_of_memory+0x1ca/0x230 [ 688.071174][T29284] ? memcg_event_wake+0x230/0x230 [ 688.076585][T29284] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 688.082392][T29284] ? cgroup_file_notify+0x140/0x1b0 [ 688.087603][T29284] memory_max_write+0x169/0x300 [ 688.092459][T29284] ? retint_kernel+0x2b/0x2b [ 688.097070][T29284] ? mem_cgroup_write+0x360/0x360 [ 688.102185][T29284] ? mem_cgroup_write+0x360/0x360 [ 688.107216][T29284] cgroup_file_write+0x241/0x790 [ 688.112156][T29284] ? mem_cgroup_write+0x360/0x360 [ 688.117184][T29284] ? kill_css+0x380/0x380 [ 688.121521][T29284] ? kill_css+0x380/0x380 [ 688.125854][T29284] kernfs_fop_write+0x2b8/0x480 [ 688.130710][T29284] __vfs_write+0x8a/0x110 [ 688.135035][T29284] ? kernfs_fop_open+0xd80/0xd80 [ 688.139981][T29284] vfs_write+0x20c/0x580 [ 688.144313][T29284] ksys_write+0x14f/0x290 [ 688.148675][T29284] ? __ia32_sys_read+0xb0/0xb0 [ 688.153443][T29284] ? do_fast_syscall_32+0xd1/0xd7d [ 688.158639][T29284] ? entry_SYSENTER_compat+0x70/0x7f [ 688.163919][T29284] ? do_fast_syscall_32+0xd1/0xd7d [ 688.169038][T29284] __ia32_sys_write+0x71/0xb0 [ 688.173730][T29284] do_fast_syscall_32+0x27b/0xd7d [ 688.178760][T29284] entry_SYSENTER_compat+0x70/0x7f [ 688.183866][T29284] RIP: 0023:0xf7f67849 [ 688.187934][T29284] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 688.207539][T29284] RSP: 002b:00000000f5d630cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 688.215954][T29284] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 688.223922][T29284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.231897][T29284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.239865][T29284] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 12:22:42 executing program 3: clock_gettime(0x0, &(0x7f0000000280)={0x0}) futex(&(0x7f000000cffc)=0x200000001, 0x8b, 0x1, &(0x7f0000000040)={r0}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 12:22:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) ioctl$PPPOEIOCSFWD(r2, 0x4004b100, 0x0) [ 688.247839][T29284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 688.334419][T29284] memory: usage 21124kB, limit 0kB, failcnt 0 [ 688.354606][T29284] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 688.413708][T29284] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 688.447410][T29284] Memory cgroup stats for /syz5: cache:132KB rss:15480KB rss_huge:14336KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:15408KB inactive_file:0KB active_file:0KB unevictable:132KB [ 688.488656][T29280] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.495827][T29280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.496056][T29280] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.510883][T29280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.518844][T29284] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=29283,uid=0 [ 688.541856][T29284] Memory cgroup out of memory: Killed process 29283 (syz-executor.5) total-vm:72320kB, anon-rss:4196kB, file-rss:34816kB, shmem-rss:0kB [ 688.553676][T29280] device bridge0 entered promiscuous mode [ 688.574280][ T1042] oom_reaper: reaped process 29283 (syz-executor.5), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 688.597848][ T8602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 12:22:42 executing program 5: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) 12:22:42 executing program 0: semget$private(0x0, 0x3, 0x141) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in6}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x800000000000, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet(0xa, 0x3, 0xb) r2 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001340)="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") syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x2) 12:22:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) write$cgroup_pid(r1, &(0x7f0000000240), 0x6) ioctl$PPPOEIOCSFWD(r2, 0x4004b100, 0x0) 12:22:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)={0x80, 0x0, 0x263}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 688.698383][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 12:22:42 executing program 1: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) [ 688.786727][ T8592] CPU: 0 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 688.794571][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.804618][ T8592] Call Trace: [ 688.807913][ T8592] dump_stack+0x172/0x1f0 [ 688.812229][ T8592] dump_header+0x10f/0xb6c [ 688.816627][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 688.822415][ T8592] ? ___ratelimit+0x60/0x595 [ 688.827000][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 688.832094][ T8592] oom_kill_process.cold+0x10/0x15 [ 688.837194][ T8592] out_of_memory+0x79a/0x1280 [ 688.841854][ T8592] ? lock_downgrade+0x880/0x880 [ 688.846685][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 688.852914][ T8592] ? oom_killer_disable+0x280/0x280 [ 688.858091][ T8592] ? find_held_lock+0x35/0x130 [ 688.862844][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 688.868369][ T8592] ? memcg_event_wake+0x230/0x230 [ 688.873377][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 688.878471][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 688.883321][ T8592] try_charge+0x102c/0x15c0 [ 688.887805][ T8592] ? find_held_lock+0x35/0x130 [ 688.892555][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 688.898083][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 688.903609][ T8592] ? find_held_lock+0x35/0x130 [ 688.908358][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 688.913910][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 688.919438][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 688.924619][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 688.930148][ T8592] __memcg_kmem_charge+0x136/0x300 [ 688.935242][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 688.940614][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 688.946836][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 688.952538][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 688.957979][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 688.963256][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 688.968401][ T8592] ? kasan_check_read+0x11/0x20 [ 688.973239][ T8592] copy_process.part.0+0x4a0/0x6790 [ 688.978423][ T8592] ? __might_fault+0x12b/0x1e0 [ 688.983178][ T8592] ? __cleanup_sighand+0x60/0x60 [ 688.988099][ T8592] ? lock_downgrade+0x880/0x880 [ 688.993029][ T8592] _do_fork+0x25d/0xfe0 [ 688.997181][ T8592] ? copy_init_mm+0x20/0x20 [ 689.001688][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 689.007920][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 689.013451][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 689.018547][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 689.024775][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 689.029875][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 689.035590][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 689.040601][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 689.045697][ T8592] RIP: 0023:0xf7f67849 [ 689.049749][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 689.069515][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 689.077931][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 689.085894][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 689.093859][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 689.101817][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 689.109857][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:22:43 executing program 3: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) 12:22:43 executing program 4: semget$private(0x0, 0x3, 0x141) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in6}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x800000000000, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet(0xa, 0x3, 0xb) r2 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001340)="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") syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x2) 12:22:43 executing program 0: semget$private(0x0, 0x3, 0x141) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in6}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x800000000000, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet(0xa, 0x3, 0xb) r2 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001340)="ba1a933a7f0c03fbbbdd69951eb5c14697f96dac8b62195b53cd29092c2e16fdf6d3286e3c4919e7b4e6171c221d142029989ed8326bffec78b5dd4e6f224098d7fefc373feea4f5448ba2cd5d388f6ed52bcdb0809c1a9ff4904c51a3d184050974872249637d559d46a37feac5e2125a3e81fc5d3ade26a28f0eacea63d4f9120f445f8ae350de046388fa0be681984ec94dddd2602814c75fc6476e5aee6c572e66baa0f81650bad83d5b05b922c6e760bb876dbf70606c63b634fe002ad535283aeab71425e0e9149062ce3798442159a9abf9cc08ebd32ee7dcefe5f6824c4d0bc7bdb750bb0760d5ca4d641e2a4df613ba8563af1936029a9790230cf6") syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x2) 12:22:43 executing program 1: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) 12:22:43 executing program 3: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) [ 689.664383][ T8592] memory: usage 16752kB, limit 0kB, failcnt 17 [ 689.670595][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 689.717822][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 12:22:43 executing program 4: semget$private(0x0, 0x3, 0x141) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in6}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x800000000000, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet(0xa, 0x3, 0xb) r2 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001340)="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") syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x2) [ 689.774342][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:11228KB rss_huge:10240KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:11228KB inactive_file:0KB active_file:0KB unevictable:132KB 12:22:43 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000e00)) syz_open_dev$usb(0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000200)={'icmp6\x00'}, 0x0) unshare(0x40000000) [ 689.911116][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26602,uid=0 [ 689.975511][ C0] net_ratelimit: 16 callbacks suppressed [ 689.975534][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 689.988749][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.025534][T29343] IPVS: ftp: loaded support on port[0] = 21 [ 690.032747][ T8592] Memory cgroup out of memory: Killed process 26602 (syz-executor.5) total-vm:72452kB, anon-rss:2196kB, file-rss:35580kB, shmem-rss:0kB [ 690.087917][ T1042] oom_reaper: reaped process 26602 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 690.091127][T29334] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 690.115658][T29334] CPU: 0 PID: 29334 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 690.123657][T29334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.133814][T29334] Call Trace: [ 690.137120][T29334] dump_stack+0x172/0x1f0 [ 690.141461][T29334] dump_header+0x10f/0xb6c [ 690.145886][T29334] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 690.151786][T29334] ? ___ratelimit+0x60/0x595 [ 690.156484][T29334] ? do_raw_spin_unlock+0x57/0x270 [ 690.162215][T29334] oom_kill_process.cold+0x10/0x15 [ 690.167322][T29334] out_of_memory+0x79a/0x1280 [ 690.167339][T29334] ? retint_kernel+0x2b/0x2b [ 690.167354][T29334] ? oom_killer_disable+0x280/0x280 [ 690.167384][T29334] mem_cgroup_out_of_memory+0x1ca/0x230 [ 690.187340][T29334] ? memcg_event_wake+0x230/0x230 [ 690.192364][T29334] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 690.192383][T29334] ? cgroup_file_notify+0x140/0x1b0 [ 690.203355][T29334] memory_max_write+0x169/0x300 [ 690.208201][T29334] ? mem_cgroup_write+0x360/0x360 [ 690.208217][T29334] ? lock_acquire+0x16f/0x3f0 [ 690.208235][T29334] ? kernfs_fop_write+0x227/0x480 [ 690.217886][T29334] cgroup_file_write+0x241/0x790 [ 690.217902][T29334] ? mem_cgroup_write+0x360/0x360 [ 690.217918][T29334] ? kill_css+0x380/0x380 [ 690.227926][T29334] ? kill_css+0x380/0x380 [ 690.227939][T29334] kernfs_fop_write+0x2b8/0x480 [ 690.227957][T29334] __vfs_write+0x8a/0x110 [ 690.237268][T29334] ? kernfs_fop_open+0xd80/0xd80 [ 690.237285][T29334] vfs_write+0x20c/0x580 [ 690.237302][T29334] ksys_write+0x14f/0x290 [ 690.246432][T29334] ? __ia32_sys_read+0xb0/0xb0 [ 690.246449][T29334] ? do_fast_syscall_32+0xd1/0xd7d [ 690.246468][T29334] ? entry_SYSENTER_compat+0x70/0x7f [ 690.255732][T29334] ? do_fast_syscall_32+0xd1/0xd7d [ 690.255752][T29334] __ia32_sys_write+0x71/0xb0 [ 690.255774][T29334] do_fast_syscall_32+0x27b/0xd7d [ 690.264415][T29334] entry_SYSENTER_compat+0x70/0x7f [ 690.264427][T29334] RIP: 0023:0xf7f16849 [ 690.264440][T29334] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 690.264453][T29334] RSP: 002b:00000000f5d120cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 690.274686][T29334] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 690.274694][T29334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 690.274701][T29334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 690.274708][T29334] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 690.274715][T29334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 690.303349][T29334] memory: usage 25992kB, limit 0kB, failcnt 0 [ 690.351120][T29334] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 690.351204][T29334] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 690.385009][T29334] Memory cgroup stats for /syz3: cache:96KB rss:17936KB rss_huge:16384KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:17860KB inactive_file:132KB active_file:0KB unevictable:0KB [ 690.403433][T29334] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29333,uid=0 [ 690.443006][T29334] Memory cgroup out of memory: Killed process 29333 (syz-executor.3) total-vm:72452kB, anon-rss:4208kB, file-rss:34816kB, shmem-rss:0kB [ 690.473815][ T1042] oom_reaper: reaped process 29333 (syz-executor.3), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 690.491703][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 690.514392][ T8592] CPU: 0 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 690.522327][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.532378][ T8592] Call Trace: [ 690.535710][ T8592] dump_stack+0x172/0x1f0 [ 690.540225][ T8592] dump_header+0x10f/0xb6c [ 690.544644][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 690.550452][ T8592] ? ___ratelimit+0x60/0x595 [ 690.555039][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 690.560157][ T8592] oom_kill_process.cold+0x10/0x15 [ 690.565270][ T8592] out_of_memory+0x79a/0x1280 [ 690.570087][ T8592] ? oom_killer_disable+0x280/0x280 [ 690.575288][ T8592] ? find_held_lock+0x35/0x130 [ 690.580071][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 690.585618][ T8592] ? memcg_event_wake+0x230/0x230 [ 690.590658][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 690.595853][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 690.600712][ T8592] try_charge+0x102c/0x15c0 [ 690.605213][ T8592] ? find_held_lock+0x35/0x130 [ 690.609994][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 690.615540][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 690.621174][ T8592] ? find_held_lock+0x35/0x130 [ 690.625945][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 690.631595][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 690.637153][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 690.642363][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 690.647913][ T8592] __memcg_kmem_charge+0x136/0x300 [ 690.653118][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 690.658494][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 690.664733][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 690.670461][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 690.675929][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 690.681221][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 690.686238][ T8592] ? kasan_check_read+0x11/0x20 [ 690.691086][ T8592] copy_process.part.0+0x4a0/0x6790 [ 690.691913][T29346] IPVS: ftp: loaded support on port[0] = 21 [ 690.696369][ T8592] ? __might_fault+0x12b/0x1e0 [ 690.707266][ T8592] ? __cleanup_sighand+0x60/0x60 [ 690.707286][ T8592] ? lock_downgrade+0x880/0x880 [ 690.717046][ T8592] _do_fork+0x25d/0xfe0 [ 690.717066][ T8592] ? copy_init_mm+0x20/0x20 [ 690.717090][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 690.725700][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 690.725715][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 690.725730][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 690.725759][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 690.737423][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 690.737441][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 690.737459][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 690.737473][ T8592] RIP: 0023:0xf7f67849 [ 690.747822][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 690.747830][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 690.747843][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 690.747851][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 690.747865][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 690.758666][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 690.758673][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 690.759878][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.768924][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.793674][ T8592] memory: usage 14424kB, limit 0kB, failcnt 23 [ 690.811851][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 690.827756][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 690.849498][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:9060KB rss_huge:8192KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:9060KB inactive_file:0KB active_file:0KB unevictable:132KB [ 690.869519][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24152,uid=0 [ 690.913602][ T8592] Memory cgroup out of memory: Killed process 24152 (syz-executor.5) total-vm:72452kB, anon-rss:2196kB, file-rss:35568kB, shmem-rss:0kB [ 690.928890][ T1042] oom_reaper: reaped process 24152 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 690.951631][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 690.963530][ T8592] CPU: 0 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 690.963538][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.963543][ T8592] Call Trace: [ 690.963565][ T8592] dump_stack+0x172/0x1f0 [ 690.963587][ T8592] dump_header+0x10f/0xb6c [ 690.984714][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 690.984738][ T8592] ? ___ratelimit+0x60/0x595 [ 690.984753][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 690.984772][ T8592] oom_kill_process.cold+0x10/0x15 [ 690.984790][ T8592] out_of_memory+0x79a/0x1280 [ 690.993525][ T8592] ? lock_downgrade+0x880/0x880 [ 690.993539][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 690.993558][ T8592] ? oom_killer_disable+0x280/0x280 [ 691.003912][ T8592] ? find_held_lock+0x35/0x130 [ 691.003944][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 691.014222][ T8592] ? memcg_event_wake+0x230/0x230 [ 691.014242][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 691.014265][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 691.023843][ T8592] try_charge+0x102c/0x15c0 [ 691.023855][ T8592] ? find_held_lock+0x35/0x130 [ 691.023875][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 691.035454][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 691.035470][ T8592] ? find_held_lock+0x35/0x130 [ 691.035485][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 691.035512][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 691.045782][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 691.045801][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 691.045818][ T8592] __memcg_kmem_charge+0x136/0x300 [ 691.045838][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 691.056202][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 691.056221][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 691.056237][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 691.056260][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 691.065581][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 691.065594][ T8592] ? kasan_check_read+0x11/0x20 [ 691.065616][ T8592] copy_process.part.0+0x4a0/0x6790 [ 691.065638][ T8592] ? __might_fault+0x12b/0x1e0 [ 691.075998][ T8592] ? __cleanup_sighand+0x60/0x60 [ 691.076013][ T8592] ? lock_downgrade+0x880/0x880 [ 691.076038][ T8592] _do_fork+0x25d/0xfe0 [ 691.086307][ T8592] ? copy_init_mm+0x20/0x20 [ 691.086330][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 691.086350][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 691.097422][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 691.097436][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 691.097449][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 691.097467][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 691.097492][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 691.108199][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 691.108211][ T8592] RIP: 0023:0xf7f67849 [ 691.108226][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 691.108239][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 691.118669][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 691.118676][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 691.118684][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 691.118692][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 691.118699][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.119318][ T8592] memory: usage 12096kB, limit 0kB, failcnt 83 [ 691.137130][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 691.147566][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 691.158058][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:6880KB rss_huge:6144KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:6880KB inactive_file:0KB active_file:0KB unevictable:132KB [ 691.167734][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12510,uid=0 [ 691.181579][ T8592] Memory cgroup out of memory: Killed process 12510 (syz-executor.5) total-vm:72452kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 691.187818][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 691.207898][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 691.208836][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 691.214834][ T8592] CPU: 0 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 691.228746][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.228752][ T8592] Call Trace: [ 691.228771][ T8592] dump_stack+0x172/0x1f0 [ 691.228793][ T8592] dump_header+0x10f/0xb6c [ 691.257032][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 691.257046][ T8592] ? ___ratelimit+0x60/0x595 [ 691.257061][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 691.257088][ T8592] oom_kill_process.cold+0x10/0x15 [ 691.273426][ T8592] out_of_memory+0x79a/0x1280 [ 691.273443][ T8592] ? lock_downgrade+0x880/0x880 [ 691.273462][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 691.289403][ T8592] ? oom_killer_disable+0x280/0x280 [ 691.289416][ T8592] ? find_held_lock+0x35/0x130 [ 691.289438][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 691.289456][ T8592] ? memcg_event_wake+0x230/0x230 [ 691.303567][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 691.303591][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 691.303608][ T8592] try_charge+0x102c/0x15c0 [ 691.303616][ T8592] ? find_held_lock+0x35/0x130 [ 691.303632][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 691.303642][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 691.303652][ T8592] ? find_held_lock+0x35/0x130 [ 691.303663][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 691.303685][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 691.318173][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 691.318191][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 691.318208][ T8592] __memcg_kmem_charge+0x136/0x300 [ 691.318228][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 691.355162][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 691.355180][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 691.355200][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 691.374776][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 691.374792][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 691.374805][ T8592] ? kasan_check_read+0x11/0x20 [ 691.374832][ T8592] copy_process.part.0+0x4a0/0x6790 [ 691.392305][ T8592] ? __might_fault+0x12b/0x1e0 [ 691.410131][ T8592] ? __cleanup_sighand+0x60/0x60 [ 691.410147][ T8592] ? lock_downgrade+0x880/0x880 [ 691.410173][ T8592] _do_fork+0x25d/0xfe0 [ 691.418134][ T8592] ? copy_init_mm+0x20/0x20 [ 691.418157][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 691.418170][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 691.418187][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 691.428365][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 691.428378][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 691.428397][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 691.428416][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 691.438072][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 691.438083][ T8592] RIP: 0023:0xf7f67849 [ 691.438097][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 691.438109][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 691.447842][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 691.447849][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 691.447858][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 691.447865][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 691.447872][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.450216][ T8592] memory: usage 9796kB, limit 0kB, failcnt 89 [ 691.459382][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 691.459429][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 691.459438][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 691.459445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 691.459446][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:4752KB rss_huge:4096KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:4752KB inactive_file:0KB active_file:0KB unevictable:132KB [ 691.459522][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5 [ 691.459546][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 691.459547][ T8592] ,task_memcg=/syz5,task=syz-executor.5,pid=12465,uid=0 [ 691.459595][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 691.460261][ T8592] Memory cgroup out of memory: Killed process 12465 (syz-executor.5) total-vm:72320kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 691.490019][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 691.500045][ T8592] CPU: 0 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 691.500059][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.500069][ T8592] Call Trace: [ 691.511129][ T8592] dump_stack+0x172/0x1f0 [ 691.511153][ T8592] dump_header+0x10f/0xb6c [ 691.521426][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 691.521442][ T8592] ? ___ratelimit+0x60/0x595 [ 691.521456][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 691.521477][ T8592] oom_kill_process.cold+0x10/0x15 [ 691.532189][ T8592] out_of_memory+0x79a/0x1280 [ 691.532206][ T8592] ? lock_downgrade+0x880/0x880 [ 691.532225][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 691.901425][ T8592] ? oom_killer_disable+0x280/0x280 [ 691.906610][ T8592] ? find_held_lock+0x35/0x130 [ 691.911374][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 691.916907][ T8592] ? memcg_event_wake+0x230/0x230 [ 691.921913][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 691.927023][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 691.931862][ T8592] try_charge+0x102c/0x15c0 [ 691.936359][ T8592] ? find_held_lock+0x35/0x130 [ 691.941111][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 691.946724][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 691.953081][ T8592] ? find_held_lock+0x35/0x130 [ 691.957836][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 691.963368][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 691.968895][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 691.974219][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 691.979752][ T8592] __memcg_kmem_charge+0x136/0x300 [ 691.984847][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 691.990199][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 691.996423][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 692.002143][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 692.007587][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 692.012851][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 692.018355][ T8592] ? kasan_check_read+0x11/0x20 [ 692.023198][ T8592] copy_process.part.0+0x4a0/0x6790 [ 692.028379][ T8592] ? __might_fault+0x12b/0x1e0 [ 692.033126][ T8592] ? __cleanup_sighand+0x60/0x60 [ 692.038046][ T8592] ? lock_downgrade+0x880/0x880 [ 692.042886][ T8592] _do_fork+0x25d/0xfe0 [ 692.047041][ T8592] ? copy_init_mm+0x20/0x20 [ 692.051537][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.057756][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 692.063196][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 692.068298][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 692.073570][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 692.078665][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 692.084367][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 692.089372][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 692.094460][ T8592] RIP: 0023:0xf7f67849 [ 692.098505][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 692.118096][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 692.126486][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 692.134531][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 692.142483][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 692.150441][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 692.159207][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.171224][ T8592] memory: usage 7376kB, limit 0kB, failcnt 95 [ 692.182295][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 692.189976][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 692.197151][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:2600KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:2600KB inactive_file:0KB active_file:0KB unevictable:132KB [ 692.219191][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12546,uid=0 [ 692.235265][ T8592] Memory cgroup out of memory: Killed process 12546 (syz-executor.5) total-vm:72320kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 692.263950][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 692.276515][ T8592] CPU: 1 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 692.284329][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.294382][ T8592] Call Trace: [ 692.297682][ T8592] dump_stack+0x172/0x1f0 [ 692.302022][ T8592] dump_header+0x10f/0xb6c [ 692.306419][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 692.312225][ T8592] ? ___ratelimit+0x60/0x595 [ 692.316841][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 692.321949][ T8592] oom_kill_process.cold+0x10/0x15 [ 692.327040][ T8592] out_of_memory+0x79a/0x1280 [ 692.331712][ T8592] ? lock_downgrade+0x880/0x880 [ 692.336553][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.342789][ T8592] ? oom_killer_disable+0x280/0x280 [ 692.347966][ T8592] ? find_held_lock+0x35/0x130 [ 692.352719][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 692.358263][ T8592] ? memcg_event_wake+0x230/0x230 [ 692.363288][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 692.368384][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 692.373224][ T8592] try_charge+0x102c/0x15c0 [ 692.377809][ T8592] ? find_held_lock+0x35/0x130 [ 692.382569][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 692.388098][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 692.393642][ T8592] ? find_held_lock+0x35/0x130 [ 692.398401][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 692.403941][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 692.409469][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 692.414685][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 692.420398][ T8592] __memcg_kmem_charge+0x136/0x300 [ 692.425498][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 692.430854][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.437101][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 692.442820][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 692.448258][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 692.453524][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 692.458566][ T8592] ? kasan_check_read+0x11/0x20 [ 692.463422][ T8592] copy_process.part.0+0x4a0/0x6790 [ 692.468608][ T8592] ? __might_fault+0x12b/0x1e0 [ 692.473370][ T8592] ? __cleanup_sighand+0x60/0x60 [ 692.478347][ T8592] ? lock_downgrade+0x880/0x880 [ 692.483555][ T8592] _do_fork+0x25d/0xfe0 [ 692.487722][ T8592] ? copy_init_mm+0x20/0x20 [ 692.492219][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.498465][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 692.503925][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 692.509028][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 692.514301][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 692.519412][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 692.525118][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 692.530125][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 692.535229][ T8592] RIP: 0023:0xf7f67849 [ 692.539300][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 692.558910][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 692.567314][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 692.575271][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 692.583722][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 692.591676][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 692.599634][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.611293][ T8592] memory: usage 5048kB, limit 0kB, failcnt 101 [ 692.617639][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 692.625166][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 692.632136][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:436KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:436KB inactive_file:0KB active_file:0KB unevictable:132KB [ 692.653466][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12992,uid=0 [ 692.668976][ T8592] Memory cgroup out of memory: Killed process 12992 (syz-executor.5) total-vm:72320kB, anon-rss:144kB, file-rss:35632kB, shmem-rss:8kB [ 692.683845][ T1042] oom_reaper: reaped process 12992 (syz-executor.5), now anon-rss:0kB, file-rss:34892kB, shmem-rss:8kB [ 692.703168][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 692.715556][ T8592] CPU: 1 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 692.723551][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.733606][ T8592] Call Trace: [ 692.733628][ T8592] dump_stack+0x172/0x1f0 [ 692.733652][ T8592] dump_header+0x10f/0xb6c [ 692.745642][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 692.745657][ T8592] ? ___ratelimit+0x60/0x595 [ 692.745671][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 692.745695][ T8592] oom_kill_process.cold+0x10/0x15 [ 692.766406][ T8592] out_of_memory+0x79a/0x1280 [ 692.771067][ T8592] ? lock_downgrade+0x880/0x880 [ 692.775909][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.782149][ T8592] ? oom_killer_disable+0x280/0x280 [ 692.787539][ T8592] ? find_held_lock+0x35/0x130 [ 692.792293][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 692.797830][ T8592] ? memcg_event_wake+0x230/0x230 [ 692.802851][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 692.807981][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 692.812815][ T8592] try_charge+0x102c/0x15c0 [ 692.817313][ T8592] ? find_held_lock+0x35/0x130 [ 692.822077][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 692.827603][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 692.833134][ T8592] ? find_held_lock+0x35/0x130 [ 692.837896][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 692.843441][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 692.848974][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 692.854433][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 692.859976][ T8592] __memcg_kmem_charge+0x136/0x300 [ 692.865071][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 692.870422][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.876674][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 692.882413][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 692.887868][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 692.893133][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 692.898154][ T8592] ? kasan_check_read+0x11/0x20 [ 692.903266][ T8592] copy_process.part.0+0x4a0/0x6790 [ 692.908458][ T8592] ? __might_fault+0x12b/0x1e0 [ 692.913211][ T8592] ? __cleanup_sighand+0x60/0x60 [ 692.918139][ T8592] ? lock_downgrade+0x880/0x880 [ 692.922991][ T8592] _do_fork+0x25d/0xfe0 [ 692.927145][ T8592] ? copy_init_mm+0x20/0x20 [ 692.931634][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 692.937866][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 692.943326][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 692.948422][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 692.953690][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 692.958795][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 692.964515][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 692.969524][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 692.974621][ T8592] RIP: 0023:0xf7f67849 [ 692.978686][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 692.998548][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 693.006955][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 693.015116][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 693.023085][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 693.031123][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 693.039077][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.047918][ T8592] memory: usage 4792kB, limit 0kB, failcnt 155 [ 693.054153][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 693.061685][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 693.068591][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:436KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:436KB inactive_file:0KB active_file:0KB unevictable:132KB [ 693.089804][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13009,uid=0 [ 693.089907][ T8592] Memory cgroup out of memory: Killed process 13009 (syz-executor.5) total-vm:72320kB, anon-rss:144kB, file-rss:35628kB, shmem-rss:8kB [ 693.104271][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 693.119200][ T8592] CPU: 1 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 693.139897][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.150033][ T8592] Call Trace: [ 693.150055][ T8592] dump_stack+0x172/0x1f0 [ 693.150073][ T8592] dump_header+0x10f/0xb6c [ 693.150087][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 693.150100][ T8592] ? ___ratelimit+0x60/0x595 [ 693.150114][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 693.150129][ T8592] oom_kill_process.cold+0x10/0x15 [ 693.150145][ T8592] out_of_memory+0x79a/0x1280 [ 693.150161][ T8592] ? lock_downgrade+0x880/0x880 [ 693.150174][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.150192][ T8592] ? oom_killer_disable+0x280/0x280 [ 693.162218][ T8592] ? find_held_lock+0x35/0x130 [ 693.172592][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 693.183390][ T8592] ? memcg_event_wake+0x230/0x230 [ 693.192907][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 693.204496][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 693.214803][ T8592] try_charge+0x102c/0x15c0 [ 693.214821][ T8592] ? find_held_lock+0x35/0x130 [ 693.214841][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 693.214855][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 693.214867][ T8592] ? find_held_lock+0x35/0x130 [ 693.214882][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 693.214911][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 693.214926][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 693.214950][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 693.229906][ T8592] __memcg_kmem_charge+0x136/0x300 [ 693.239221][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 693.250562][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.261010][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 693.271751][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 693.283330][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 693.294915][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 693.294928][ T8592] ? kasan_check_read+0x11/0x20 [ 693.294960][ T8592] copy_process.part.0+0x4a0/0x6790 [ 693.294976][ T8592] ? __might_fault+0x12b/0x1e0 [ 693.294999][ T8592] ? __cleanup_sighand+0x60/0x60 [ 693.295013][ T8592] ? lock_downgrade+0x880/0x880 [ 693.295045][ T8592] _do_fork+0x25d/0xfe0 [ 693.311503][ T8592] ? copy_init_mm+0x20/0x20 [ 693.321529][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.332104][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 693.342151][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 693.350967][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 693.362618][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 693.373010][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 693.383820][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 693.388851][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 693.394218][ T8592] RIP: 0023:0xf7f67849 [ 693.398365][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 693.417957][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 693.426379][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 693.434344][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 693.442307][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 693.451010][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 693.458987][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.468228][ T8592] memory: usage 4536kB, limit 0kB, failcnt 161 [ 693.474687][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 693.483175][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 693.490333][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:436KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:436KB inactive_file:0KB active_file:0KB unevictable:132KB [ 693.512081][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12982,uid=0 [ 693.512185][ T8592] Memory cgroup out of memory: Killed process 12982 (syz-executor.5) total-vm:72320kB, anon-rss:144kB, file-rss:35608kB, shmem-rss:8kB [ 693.543698][ T8592] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 693.559204][ T8592] CPU: 1 PID: 8592 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 693.567058][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.567063][ T8592] Call Trace: [ 693.567085][ T8592] dump_stack+0x172/0x1f0 [ 693.567109][ T8592] dump_header+0x10f/0xb6c [ 693.567125][ T8592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 693.567142][ T8592] ? ___ratelimit+0x60/0x595 [ 693.567162][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 693.584787][ T8592] oom_kill_process.cold+0x10/0x15 [ 693.584805][ T8592] out_of_memory+0x79a/0x1280 [ 693.584822][ T8592] ? lock_downgrade+0x880/0x880 [ 693.584840][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.595144][ T8592] ? oom_killer_disable+0x280/0x280 [ 693.595157][ T8592] ? find_held_lock+0x35/0x130 [ 693.595184][ T8592] mem_cgroup_out_of_memory+0x1ca/0x230 [ 693.595197][ T8592] ? memcg_event_wake+0x230/0x230 [ 693.595216][ T8592] ? do_raw_spin_unlock+0x57/0x270 [ 693.595233][ T8592] ? _raw_spin_unlock+0x2d/0x50 [ 693.595250][ T8592] try_charge+0x102c/0x15c0 [ 693.595260][ T8592] ? find_held_lock+0x35/0x130 [ 693.595283][ T8592] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 693.595300][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 693.677099][ T8592] ? find_held_lock+0x35/0x130 [ 693.681861][ T8592] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 693.688090][ T8592] __memcg_kmem_charge_memcg+0x7c/0x130 [ 693.693631][ T8592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 693.698835][ T8592] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 693.704382][ T8592] __memcg_kmem_charge+0x136/0x300 [ 693.709507][ T8592] __alloc_pages_nodemask+0x4bd/0x8d0 [ 693.714881][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.721117][ T8592] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 693.726820][ T8592] ? copy_process.part.0+0x43f7/0x6790 [ 693.732260][ T8592] ? lockdep_hardirqs_on+0x418/0x5d0 [ 693.737625][ T8592] ? trace_hardirqs_on+0x67/0x220 [ 693.742637][ T8592] ? kasan_check_read+0x11/0x20 [ 693.747472][ T8592] copy_process.part.0+0x4a0/0x6790 [ 693.752653][ T8592] ? __might_fault+0x12b/0x1e0 [ 693.757415][ T8592] ? __cleanup_sighand+0x60/0x60 [ 693.762458][ T8592] ? lock_downgrade+0x880/0x880 [ 693.767299][ T8592] _do_fork+0x25d/0xfe0 [ 693.771439][ T8592] ? copy_init_mm+0x20/0x20 [ 693.775953][ T8592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.782189][ T8592] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 693.787721][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 693.792814][ T8592] ? entry_SYSENTER_compat+0x70/0x7f [ 693.798092][ T8592] ? do_fast_syscall_32+0xd1/0xd7d [ 693.803202][ T8592] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 693.808919][ T8592] do_fast_syscall_32+0x27b/0xd7d [ 693.813933][ T8592] entry_SYSENTER_compat+0x70/0x7f [ 693.819027][ T8592] RIP: 0023:0xf7f67849 [ 693.823115][ T8592] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 693.842817][ T8592] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 693.851221][ T8592] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 693.859220][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056d33968 [ 693.867183][ T8592] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 693.875143][ T8592] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 693.883106][ T8592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.892867][ T8592] memory: usage 4256kB, limit 0kB, failcnt 167 [ 693.899169][ T8592] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 693.907680][ T8592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 693.914941][ T8592] Memory cgroup stats for /syz5: cache:132KB rss:288KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:304KB inactive_file:0KB active_file:0KB unevictable:132KB [ 693.937037][ T8592] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8592,uid=0 [ 693.953780][ T8592] Memory cgroup out of memory: Killed process 8592 (syz-executor.5) total-vm:72188kB, anon-rss:100kB, file-rss:35556kB, shmem-rss:0kB 12:22:48 executing program 5: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) 12:22:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)={0x80, 0x0, 0x263}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:22:48 executing program 1: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) 12:22:48 executing program 4: semget$private(0x0, 0x3, 0x141) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6=@empty}}, {{@in6}, 0x0, @in6}}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x800000000000, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$inet(0xa, 0x3, 0xb) r2 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001340)="ba1a933a7f0c03fbbbdd69951eb5c14697f96dac8b62195b53cd29092c2e16fdf6d3286e3c4919e7b4e6171c221d142029989ed8326bffec78b5dd4e6f224098d7fefc373feea4f5448ba2cd5d388f6ed52bcdb0809c1a9ff4904c51a3d184050974872249637d559d46a37feac5e2125a3e81fc5d3ade26a28f0eacea63d4f9120f445f8ae350de046388fa0be681984ec94dddd2602814c75fc6476e5aee6c572e66baa0f81650bad83d5b05b922c6e760bb876dbf70606c63b634fe002ad535283aeab71425e0e9149062ce3798442159a9abf9cc08ebd32ee7dcefe5f6824c4d0bc7bdb750bb0760d5ca4d641e2a4df613ba8563af1936029a9790230cf6") syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x2) 12:22:48 executing program 3: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) [ 694.200995][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 694.242084][ T8584] CPU: 1 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 694.249925][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.259983][ T8584] Call Trace: [ 694.263273][ T8584] dump_stack+0x172/0x1f0 [ 694.267602][ T8584] dump_header+0x10f/0xb6c [ 694.272015][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 694.277825][ T8584] ? ___ratelimit+0x60/0x595 [ 694.282420][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 694.287550][ T8584] oom_kill_process.cold+0x10/0x15 [ 694.292674][ T8584] out_of_memory+0x79a/0x1280 [ 694.297353][ T8584] ? lock_downgrade+0x880/0x880 [ 694.302194][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.308439][ T8584] ? oom_killer_disable+0x280/0x280 [ 694.313625][ T8584] ? find_held_lock+0x35/0x130 [ 694.318378][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 694.323991][ T8584] ? memcg_event_wake+0x230/0x230 [ 694.329006][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 694.334105][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 694.338980][ T8584] try_charge+0x102c/0x15c0 [ 694.343474][ T8584] ? find_held_lock+0x35/0x130 [ 694.348224][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 694.353756][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 694.359281][ T8584] ? find_held_lock+0x35/0x130 [ 694.364202][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 694.369735][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 694.375262][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 694.380450][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 694.385978][ T8584] __memcg_kmem_charge+0x136/0x300 [ 694.391091][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 694.396452][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.402676][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 694.408378][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 694.413834][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 694.419191][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 694.424194][ T8584] ? kasan_check_read+0x11/0x20 [ 694.429031][ T8584] copy_process.part.0+0x4a0/0x6790 [ 694.434573][ T8584] ? __might_fault+0x12b/0x1e0 [ 694.439332][ T8584] ? __cleanup_sighand+0x60/0x60 [ 694.444255][ T8584] ? lock_downgrade+0x880/0x880 [ 694.449104][ T8584] _do_fork+0x25d/0xfe0 [ 694.453255][ T8584] ? copy_init_mm+0x20/0x20 [ 694.457839][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.464061][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 694.469503][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 694.474595][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 694.479861][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 694.484955][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 694.490658][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 694.495781][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 694.500873][ T8584] RIP: 0023:0xf7f16849 [ 694.504933][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 694.524518][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 694.532907][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 694.541127][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 694.549091][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 694.557045][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 694.565009][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 12:22:48 executing program 5: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r2}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed8280238dd308252644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='io.bfq.ht\x00\x00\x00\x00\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xb2) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x20000) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000240)={0x1, 0x20}, 0x2) sendmsg$kcm(r5, 0x0, 0x24000001) write$cgroup_int(r4, 0x0, 0x0) 12:22:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000080)) dup2(r1, r0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 694.904438][ T8584] memory: usage 21560kB, limit 0kB, failcnt 8 [ 694.910572][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 694.971260][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 12:22:49 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000080)) dup2(r1, r0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 695.017979][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:13668KB rss_huge:12288KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:13668KB inactive_file:132KB active_file:0KB unevictable:0KB 12:22:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x00', 0x21}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 695.192105][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24939,uid=0 12:22:49 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000080)) dup2(r1, r0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:22:49 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xff\xff\xff\xff\xff\xff\xff\x00'}, 0x3, 0x0, 0x3, 0x0, 0x67c7ee1734bee44f, 0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\xff\xff\xff\x00@\x00', 0x0, 0x8}) [ 695.494451][ C1] net_ratelimit: 14 callbacks suppressed [ 695.494460][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 695.505990][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 695.574415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 695.580253][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 695.586114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 695.591973][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 695.754551][ T8584] Memory cgroup out of memory: Killed process 24939 (syz-executor.3) total-vm:72584kB, anon-rss:2208kB, file-rss:35564kB, shmem-rss:0kB [ 695.780764][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 695.781258][ T1042] oom_reaper: reaped process 24939 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 695.807393][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 695.815237][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.825387][ T8580] Call Trace: [ 695.828676][ T8580] dump_stack+0x172/0x1f0 [ 695.833002][ T8580] dump_header+0x10f/0xb6c [ 695.837432][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 695.843249][ T8580] ? ___ratelimit+0x60/0x595 [ 695.847846][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 695.852955][ T8580] oom_kill_process.cold+0x10/0x15 [ 695.858067][ T8580] out_of_memory+0x79a/0x1280 [ 695.862751][ T8580] ? oom_killer_disable+0x280/0x280 [ 695.867942][ T8580] ? find_held_lock+0x35/0x130 [ 695.872710][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 695.878258][ T8580] ? memcg_event_wake+0x230/0x230 [ 695.883283][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 695.888388][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 695.893240][ T8580] try_charge+0x102c/0x15c0 [ 695.897735][ T8580] ? find_held_lock+0x35/0x130 [ 695.902504][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 695.908042][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 695.913582][ T8580] ? find_held_lock+0x35/0x130 [ 695.918347][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 695.923899][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 695.929439][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 695.934638][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 695.940180][ T8580] __memcg_kmem_charge+0x136/0x300 [ 695.945295][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 695.950664][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.956905][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 695.962619][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 695.968784][ T8580] copy_process.part.0+0x4a0/0x6790 [ 695.973982][ T8580] ? __might_fault+0x12b/0x1e0 [ 695.978755][ T8580] ? __cleanup_sighand+0x60/0x60 [ 695.983699][ T8580] ? lock_downgrade+0x880/0x880 [ 695.988576][ T8580] _do_fork+0x25d/0xfe0 [ 695.992740][ T8580] ? copy_init_mm+0x20/0x20 [ 695.997248][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.003488][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 696.008944][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 696.014047][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 696.019338][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 696.024457][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 696.030266][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 696.035300][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 696.040418][ T8580] RIP: 0023:0xf7ff2849 [ 696.044487][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 696.064085][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 696.072489][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 696.080455][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 696.088423][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 696.096385][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 696.104362][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.115314][ T8580] memory: usage 49788kB, limit 0kB, failcnt 8 [ 696.121395][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 696.129288][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 696.136549][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:41472KB rss_huge:38912KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:41324KB inactive_file:132KB active_file:0KB unevictable:0KB [ 696.159030][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=27675,uid=0 [ 696.174783][ T8580] Memory cgroup out of memory: Killed process 27675 (syz-executor.1) total-vm:72320kB, anon-rss:2196kB, file-rss:35616kB, shmem-rss:0kB [ 696.189243][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 696.190200][ T1042] oom_reaper: reaped process 27675 (syz-executor.1), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 696.203209][ T8584] CPU: 1 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 696.219972][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.230032][ T8584] Call Trace: [ 696.233328][ T8584] dump_stack+0x172/0x1f0 [ 696.237662][ T8584] dump_header+0x10f/0xb6c [ 696.242073][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 696.247873][ T8584] ? ___ratelimit+0x60/0x595 [ 696.252459][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 696.257587][ T8584] oom_kill_process.cold+0x10/0x15 [ 696.262695][ T8584] out_of_memory+0x79a/0x1280 [ 696.267509][ T8584] ? oom_killer_disable+0x280/0x280 [ 696.272701][ T8584] ? find_held_lock+0x35/0x130 [ 696.277472][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 696.283011][ T8584] ? memcg_event_wake+0x230/0x230 [ 696.288037][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 696.293143][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 696.294412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.297993][ T8584] try_charge+0x102c/0x15c0 [ 696.303732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 696.308171][ T8584] ? find_held_lock+0x35/0x130 [ 696.308192][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 696.308209][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 696.329697][ T8584] ? find_held_lock+0x35/0x130 [ 696.334462][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 696.340025][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 696.345566][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 696.350760][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 696.356314][ T8584] __memcg_kmem_charge+0x136/0x300 [ 696.361429][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 696.366798][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.373033][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 696.378753][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 696.384316][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 696.389595][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 696.394611][ T8584] ? kasan_check_read+0x11/0x20 [ 696.399461][ T8584] copy_process.part.0+0x4a0/0x6790 [ 696.404661][ T8584] ? __might_fault+0x12b/0x1e0 [ 696.409427][ T8584] ? __cleanup_sighand+0x60/0x60 [ 696.414356][ T8584] ? lock_downgrade+0x880/0x880 [ 696.419215][ T8584] _do_fork+0x25d/0xfe0 [ 696.423374][ T8584] ? copy_init_mm+0x20/0x20 [ 696.427881][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.434114][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 696.439571][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 696.444676][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 696.449965][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 696.455085][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 696.460802][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 696.465830][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 696.470930][ T8584] RIP: 0023:0xf7f16849 [ 696.474995][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 696.494593][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 696.503002][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 696.510968][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 696.518934][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 696.526897][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 696.534858][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.547863][ T8584] memory: usage 19180kB, limit 0kB, failcnt 14 [ 696.554034][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 696.561860][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 696.569024][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:11540KB rss_huge:10240KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:11540KB inactive_file:132KB active_file:0KB unevictable:0KB [ 696.591578][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24979,uid=0 [ 696.607595][ T8584] Memory cgroup out of memory: Killed process 24979 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35568kB, shmem-rss:0kB [ 696.635760][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 696.650010][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 696.657816][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.667865][ T8580] Call Trace: [ 696.671167][ T8580] dump_stack+0x172/0x1f0 [ 696.675503][ T8580] dump_header+0x10f/0xb6c [ 696.679914][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 696.685716][ T8580] ? ___ratelimit+0x60/0x595 [ 696.690299][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 696.695414][ T8580] oom_kill_process.cold+0x10/0x15 [ 696.700525][ T8580] out_of_memory+0x79a/0x1280 [ 696.705202][ T8580] ? oom_killer_disable+0x280/0x280 [ 696.710394][ T8580] ? find_held_lock+0x35/0x130 [ 696.715167][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 696.720706][ T8580] ? memcg_event_wake+0x230/0x230 [ 696.725993][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 696.731102][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 696.735960][ T8580] try_charge+0x102c/0x15c0 [ 696.740456][ T8580] ? find_held_lock+0x35/0x130 [ 696.745221][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 696.750771][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 696.756310][ T8580] ? find_held_lock+0x35/0x130 [ 696.761070][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 696.766620][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 696.772160][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 696.777357][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 696.782905][ T8580] __memcg_kmem_charge+0x136/0x300 [ 696.788017][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 696.793389][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.799625][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 696.805342][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 696.810830][ T8580] copy_process.part.0+0x4a0/0x6790 [ 696.816036][ T8580] ? __might_fault+0x12b/0x1e0 [ 696.820805][ T8580] ? __cleanup_sighand+0x60/0x60 [ 696.825744][ T8580] ? lock_downgrade+0x880/0x880 [ 696.830603][ T8580] _do_fork+0x25d/0xfe0 [ 696.834760][ T8580] ? copy_init_mm+0x20/0x20 [ 696.839274][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.845513][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 696.850967][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 696.856073][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 696.861359][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 696.866477][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 696.872198][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 696.877222][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 696.882337][ T8580] RIP: 0023:0xf7ff2849 [ 696.886403][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 696.906002][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 696.914508][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 696.922475][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 696.930440][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 696.934365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.938410][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 696.938423][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.944199][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 697.031734][T29377] IPVS: ftp: loaded support on port[0] = 21 [ 697.111787][ T8580] memory: usage 47440kB, limit 0kB, failcnt 14 [ 697.118081][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 697.134377][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 697.141933][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:39252KB rss_huge:36864KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB [ 697.141988][ T8580] active_anon:39180KB inactive_file:132KB active_file:0KB unevictable:0KB [ 697.180448][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18809,uid=0 [ 697.197096][ T8580] Memory cgroup out of memory: Killed process 18809 (syz-executor.1) total-vm:72452kB, anon-rss:2196kB, file-rss:35584kB, shmem-rss:0kB [ 697.219909][ T1042] oom_reaper: reaped process 18809 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 697.234977][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 697.270606][T29377] chnl_net:caif_netlink_parms(): no params data found [ 697.279562][ T8584] CPU: 0 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 697.287385][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.297425][ T8584] Call Trace: [ 697.297446][ T8584] dump_stack+0x172/0x1f0 [ 697.297466][ T8584] dump_header+0x10f/0xb6c [ 697.297485][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 697.309471][ T8584] ? ___ratelimit+0x60/0x595 [ 697.319820][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 697.324930][ T8584] oom_kill_process.cold+0x10/0x15 [ 697.324946][ T8584] out_of_memory+0x79a/0x1280 [ 697.324964][ T8584] ? oom_killer_disable+0x280/0x280 [ 697.324978][ T8584] ? find_held_lock+0x35/0x130 [ 697.334730][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 697.334745][ T8584] ? memcg_event_wake+0x230/0x230 [ 697.334764][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 697.344677][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 697.344694][ T8584] try_charge+0x102c/0x15c0 [ 697.344709][ T8584] ? find_held_lock+0x35/0x130 [ 697.355244][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 697.355255][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 697.355271][ T8584] ? find_held_lock+0x35/0x130 [ 697.365182][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 697.365216][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 697.365233][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 697.374460][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 697.374479][ T8584] __memcg_kmem_charge+0x136/0x300 [ 697.374497][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 697.385540][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.385557][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 697.385582][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 697.417154][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 697.428715][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 697.428727][ T8584] ? kasan_check_read+0x11/0x20 [ 697.428747][ T8584] copy_process.part.0+0x4a0/0x6790 [ 697.428761][ T8584] ? __might_fault+0x12b/0x1e0 [ 697.428784][ T8584] ? __cleanup_sighand+0x60/0x60 [ 697.455009][ T8584] ? lock_downgrade+0x880/0x880 [ 697.464935][ T8584] _do_fork+0x25d/0xfe0 [ 697.464956][ T8584] ? copy_init_mm+0x20/0x20 [ 697.464979][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.478860][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 697.489557][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 697.489576][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 697.489588][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 697.489605][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 697.489623][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 697.500149][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 697.510497][ T8584] RIP: 0023:0xf7f16849 [ 697.521304][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 697.530434][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 697.558757][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 697.558765][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 697.558772][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 697.558779][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 697.558786][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.603013][ T8584] memory: usage 16864kB, limit 0kB, failcnt 20 [ 697.612832][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 697.620714][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 697.627895][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:9388KB rss_huge:8192KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:9388KB inactive_file:132KB active_file:0KB unevictable:0KB [ 697.650615][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=25022,uid=0 [ 697.666872][ T8584] Memory cgroup out of memory: Killed process 25022 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35568kB, shmem-rss:0kB [ 697.702264][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 697.718272][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 697.726107][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.726113][ T8580] Call Trace: [ 697.726132][ T8580] dump_stack+0x172/0x1f0 [ 697.726151][ T8580] dump_header+0x10f/0xb6c [ 697.726166][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 697.726188][ T8580] ? ___ratelimit+0x60/0x595 [ 697.726202][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 697.726220][ T8580] oom_kill_process.cold+0x10/0x15 [ 697.726235][ T8580] out_of_memory+0x79a/0x1280 [ 697.726256][ T8580] ? oom_killer_disable+0x280/0x280 [ 697.726268][ T8580] ? find_held_lock+0x35/0x130 [ 697.726292][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 697.726306][ T8580] ? memcg_event_wake+0x230/0x230 [ 697.726326][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 697.726340][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 697.726361][ T8580] try_charge+0x102c/0x15c0 [ 697.748376][ T8580] ? find_held_lock+0x35/0x130 [ 697.763834][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 697.773590][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 697.789022][ T8580] ? find_held_lock+0x35/0x130 [ 697.799115][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 697.799137][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 697.799152][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 697.799173][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 697.799190][ T8580] __memcg_kmem_charge+0x136/0x300 [ 697.799208][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 697.799223][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.799239][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 697.799254][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 697.799279][ T8580] copy_process.part.0+0x4a0/0x6790 [ 697.813343][ T8580] ? __might_fault+0x12b/0x1e0 [ 697.824393][ T8580] ? __cleanup_sighand+0x60/0x60 [ 697.824409][ T8580] ? lock_downgrade+0x880/0x880 [ 697.824433][ T8580] _do_fork+0x25d/0xfe0 [ 697.824452][ T8580] ? copy_init_mm+0x20/0x20 [ 697.824475][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.824490][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 697.824508][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 697.835290][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 697.835307][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 697.846012][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 697.846029][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 697.846051][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 697.846063][ T8580] RIP: 0023:0xf7ff2849 [ 697.846078][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 697.846085][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 697.846097][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 697.846103][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 697.846110][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 697.846121][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 697.863134][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 697.948103][ T8580] memory: usage 45140kB, limit 0kB, failcnt 20 [ 698.034839][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 698.042303][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 698.049776][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:37096KB rss_huge:34816KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:37024KB inactive_file:132KB active_file:0KB unevictable:0KB [ 698.073128][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18844,uid=0 [ 698.090017][ T8580] Memory cgroup out of memory: Killed process 18844 (syz-executor.1) total-vm:72452kB, anon-rss:2196kB, file-rss:35584kB, shmem-rss:0kB [ 698.113701][T29377] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.121267][T29377] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.126167][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 698.141016][T29377] device bridge_slave_0 entered promiscuous mode [ 698.142565][ T8584] CPU: 1 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 698.155153][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.165190][ T8584] Call Trace: [ 698.165213][ T8584] dump_stack+0x172/0x1f0 [ 698.165234][ T8584] dump_header+0x10f/0xb6c [ 698.165250][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 698.165266][ T8584] ? ___ratelimit+0x60/0x595 [ 698.165281][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 698.165297][ T8584] oom_kill_process.cold+0x10/0x15 [ 698.165314][ T8584] out_of_memory+0x79a/0x1280 [ 698.200282][T29377] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.202768][ T8584] ? oom_killer_disable+0x280/0x280 [ 698.214942][ T8584] ? find_held_lock+0x35/0x130 [ 698.219714][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 698.225261][ T8584] ? memcg_event_wake+0x230/0x230 [ 698.230290][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 698.234392][T29377] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.235398][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 698.247232][ T8584] try_charge+0x102c/0x15c0 [ 698.247244][ T8584] ? find_held_lock+0x35/0x130 [ 698.247265][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 698.247277][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 698.247290][ T8584] ? find_held_lock+0x35/0x130 [ 698.247306][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 698.247331][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 698.247344][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 698.247362][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 698.294169][ T8584] __memcg_kmem_charge+0x136/0x300 [ 698.299288][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 698.300639][T29377] device bridge_slave_1 entered promiscuous mode [ 698.304655][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 698.304674][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 698.304689][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 698.304705][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 698.304722][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 698.338672][ T8584] ? kasan_check_read+0x11/0x20 [ 698.343645][ T8584] copy_process.part.0+0x4a0/0x6790 [ 698.343664][ T8584] ? __might_fault+0x12b/0x1e0 [ 698.353689][ T8584] ? __cleanup_sighand+0x60/0x60 [ 698.358628][ T8584] ? lock_downgrade+0x880/0x880 [ 698.363490][ T8584] _do_fork+0x25d/0xfe0 [ 698.367649][ T8584] ? copy_init_mm+0x20/0x20 [ 698.372160][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 698.378387][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 698.378401][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 698.378413][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 698.378425][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 698.378442][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 698.378458][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 698.378474][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 698.378486][ T8584] RIP: 0023:0xf7f16849 [ 698.378499][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 698.378506][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 698.378522][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 698.378529][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 698.378536][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 698.378544][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 698.378550][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.404415][ T8584] memory: usage 14564kB, limit 0kB, failcnt 26 [ 698.446259][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 698.461578][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 698.472134][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:7236KB rss_huge:6144KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:7236KB inactive_file:132KB active_file:0KB unevictable:0KB [ 698.494999][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=25067,uid=0 [ 698.514442][ T8584] Memory cgroup out of memory: Killed process 25067 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35568kB, shmem-rss:0kB [ 698.575648][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 698.588699][T29377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 698.595175][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 698.604831][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.604836][ T8580] Call Trace: [ 698.604857][ T8580] dump_stack+0x172/0x1f0 [ 698.604877][ T8580] dump_header+0x10f/0xb6c [ 698.604892][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 698.604906][ T8580] ? ___ratelimit+0x60/0x595 [ 698.604924][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 698.617414][T29377] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 698.618251][ T8580] oom_kill_process.cold+0x10/0x15 [ 698.627061][ T8580] out_of_memory+0x79a/0x1280 [ 698.627080][ T8580] ? oom_killer_disable+0x280/0x280 [ 698.627093][ T8580] ? find_held_lock+0x35/0x130 [ 698.627122][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 698.627139][ T8580] ? memcg_event_wake+0x230/0x230 [ 698.637502][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 698.650807][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 698.650827][ T8580] try_charge+0x102c/0x15c0 [ 698.650838][ T8580] ? find_held_lock+0x35/0x130 [ 698.650857][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 698.650874][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 698.660624][ T8580] ? find_held_lock+0x35/0x130 [ 698.670541][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 698.681065][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 698.690984][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 698.700202][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 698.711246][ T8580] __memcg_kmem_charge+0x136/0x300 [ 698.721511][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 698.732206][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 698.742919][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 698.754491][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 698.754517][ T8580] copy_process.part.0+0x4a0/0x6790 [ 698.754533][ T8580] ? __might_fault+0x12b/0x1e0 [ 698.754560][ T8580] ? __cleanup_sighand+0x60/0x60 [ 698.765699][ T8580] ? lock_downgrade+0x880/0x880 [ 698.765726][ T8580] _do_fork+0x25d/0xfe0 [ 698.765745][ T8580] ? copy_init_mm+0x20/0x20 [ 698.765767][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 698.775684][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 698.775698][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 698.775711][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 698.775722][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 698.775740][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 698.775757][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 698.775773][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 698.775782][ T8580] RIP: 0023:0xf7ff2849 [ 698.775799][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 698.785536][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 698.785548][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 12:22:52 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000e00)) syz_open_dev$usb(0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000200)={'icmp6\x00'}, 0x0) unshare(0x40000000) 12:22:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 12:22:52 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000080)) dup2(r1, r0) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 698.785555][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 698.785562][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 698.785569][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 698.785576][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.797108][ T8580] memory: usage 42824kB, limit 0kB, failcnt 26 [ 698.811122][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 698.827516][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 698.837616][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:34872KB rss_huge:32768KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:34872KB inactive_file:132KB active_file:0KB unevictable:0KB [ 698.837690][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18873,uid=0 12:22:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 698.837785][ T8580] Memory cgroup out of memory: Killed process 18873 (syz-executor.1) total-vm:72452kB, anon-rss:2196kB, file-rss:35584kB, shmem-rss:0kB [ 698.978185][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 698.999751][ T8584] CPU: 1 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 699.007600][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.017669][ T8584] Call Trace: [ 699.020967][ T8584] dump_stack+0x172/0x1f0 [ 699.026434][ T8584] dump_header+0x10f/0xb6c [ 699.030835][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 699.036626][ T8584] ? ___ratelimit+0x60/0x595 [ 699.041197][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 699.046294][ T8584] oom_kill_process.cold+0x10/0x15 [ 699.051390][ T8584] out_of_memory+0x79a/0x1280 [ 699.056053][ T8584] ? oom_killer_disable+0x280/0x280 [ 699.061248][ T8584] ? find_held_lock+0x35/0x130 [ 699.066003][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 699.071538][ T8584] ? memcg_event_wake+0x230/0x230 [ 699.076547][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 699.081636][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 699.086470][ T8584] try_charge+0x102c/0x15c0 [ 699.090956][ T8584] ? find_held_lock+0x35/0x130 [ 699.095708][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 699.101234][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 699.106762][ T8584] ? find_held_lock+0x35/0x130 [ 699.111508][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 699.117040][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 699.122574][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 699.127756][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 699.133282][ T8584] __memcg_kmem_charge+0x136/0x300 [ 699.138923][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 699.144288][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.150601][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 699.156305][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 699.161761][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 699.167038][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 699.172045][ T8584] ? kasan_check_read+0x11/0x20 [ 699.176888][ T8584] copy_process.part.0+0x4a0/0x6790 [ 699.182074][ T8584] ? __might_fault+0x12b/0x1e0 [ 699.186824][ T8584] ? __cleanup_sighand+0x60/0x60 [ 699.191744][ T8584] ? lock_downgrade+0x880/0x880 [ 699.196585][ T8584] _do_fork+0x25d/0xfe0 [ 699.200725][ T8584] ? copy_init_mm+0x20/0x20 [ 699.205215][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.211439][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 699.216879][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 699.221969][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 699.227234][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 699.232333][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 699.238036][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 699.243058][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 699.248150][ T8584] RIP: 0023:0xf7f16849 [ 699.252202][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 699.271784][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 699.280174][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 699.288128][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 699.296082][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 699.304029][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 699.311989][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.343340][T29377] team0: Port device team_slave_0 added [ 699.358299][T29377] team0: Port device team_slave_1 added [ 699.371587][T29384] IPVS: ftp: loaded support on port[0] = 21 [ 699.407729][T29377] device hsr_slave_0 entered promiscuous mode [ 699.415901][T29377] device hsr_slave_1 entered promiscuous mode [ 699.422572][ T8584] memory: usage 12240kB, limit 0kB, failcnt 32 [ 699.429301][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 699.438063][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 699.445432][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:5064KB rss_huge:4096KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:5064KB inactive_file:132KB active_file:0KB unevictable:0KB [ 699.488612][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28658,uid=0 [ 699.511021][ T8584] Memory cgroup out of memory: Killed process 28658 (syz-executor.3) total-vm:72320kB, anon-rss:2200kB, file-rss:35572kB, shmem-rss:0kB [ 699.532477][ T1042] oom_reaper: reaped process 28658 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 699.552293][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 699.574854][ T8580] CPU: 0 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 699.582701][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.593186][ T8580] Call Trace: [ 699.593211][ T8580] dump_stack+0x172/0x1f0 [ 699.593232][ T8580] dump_header+0x10f/0xb6c [ 699.593252][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 699.611047][ T8580] ? ___ratelimit+0x60/0x595 [ 699.611064][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 699.611082][ T8580] oom_kill_process.cold+0x10/0x15 [ 699.611101][ T8580] out_of_memory+0x79a/0x1280 [ 699.621223][ T8580] ? oom_killer_disable+0x280/0x280 [ 699.621237][ T8580] ? find_held_lock+0x35/0x130 [ 699.621265][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 699.631026][ T8580] ? memcg_event_wake+0x230/0x230 [ 699.631049][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 699.631064][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 699.631085][ T8580] try_charge+0x102c/0x15c0 [ 699.641027][ T8580] ? find_held_lock+0x35/0x130 [ 699.641054][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 699.641066][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 699.641083][ T8580] ? find_held_lock+0x35/0x130 [ 699.651632][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 699.651660][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 699.651672][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 699.651691][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 12:22:53 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 699.661632][ T8580] __memcg_kmem_charge+0x136/0x300 [ 699.661652][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 699.661665][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.661683][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 699.670945][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 699.670973][ T8580] copy_process.part.0+0x4a0/0x6790 [ 699.670989][ T8580] ? __might_fault+0x12b/0x1e0 [ 699.671011][ T8580] ? __cleanup_sighand+0x60/0x60 [ 699.682075][ T8580] ? lock_downgrade+0x880/0x880 [ 699.682105][ T8580] _do_fork+0x25d/0xfe0 [ 699.682124][ T8580] ? copy_init_mm+0x20/0x20 [ 699.692429][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.692445][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 699.692458][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 699.692477][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 699.703204][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 699.703225][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 699.703242][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 699.703263][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 699.713896][ T8580] RIP: 0023:0xf7ff2849 [ 699.713914][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 699.713921][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 699.713933][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 699.713947][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 699.725520][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 699.725528][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 699.725536][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.810116][ T8580] memory: usage 40508kB, limit 0kB, failcnt 32 [ 699.869850][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 699.918523][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 699.944120][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:32704KB rss_huge:30720KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:32704KB inactive_file:132KB active_file:0KB unevictable:0KB [ 699.980162][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18755,uid=0 [ 700.021408][ T8580] Memory cgroup out of memory: Killed process 18755 (syz-executor.1) total-vm:72584kB, anon-rss:2200kB, file-rss:35568kB, shmem-rss:0kB [ 700.036548][T29377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.061495][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 700.074919][ T8584] CPU: 0 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 700.082737][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.092792][ T8584] Call Trace: [ 700.092816][ T8584] dump_stack+0x172/0x1f0 [ 700.092838][ T8584] dump_header+0x10f/0xb6c [ 700.100427][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 700.100448][ T8584] ? ___ratelimit+0x60/0x595 [ 700.110632][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 700.110658][ T8584] oom_kill_process.cold+0x10/0x15 [ 700.120313][ T8584] out_of_memory+0x79a/0x1280 [ 700.120335][ T8584] ? oom_killer_disable+0x280/0x280 [ 700.130080][ T8584] ? find_held_lock+0x35/0x130 [ 700.130110][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 700.140027][ T8584] ? memcg_event_wake+0x230/0x230 [ 700.140054][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 700.150576][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 700.150593][ T8584] try_charge+0x102c/0x15c0 [ 700.150610][ T8584] ? find_held_lock+0x35/0x130 [ 700.160531][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 700.160550][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 700.169768][ T8584] ? find_held_lock+0x35/0x130 [ 700.169784][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 700.169809][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 700.180843][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 700.180860][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 700.180879][ T8584] __memcg_kmem_charge+0x136/0x300 [ 700.191144][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 700.191158][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.191176][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 700.201874][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 700.201896][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 700.212520][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 700.212533][ T8584] ? kasan_check_read+0x11/0x20 [ 700.212553][ T8584] copy_process.part.0+0x4a0/0x6790 [ 700.224117][ T8584] ? __might_fault+0x12b/0x1e0 [ 700.224143][ T8584] ? __cleanup_sighand+0x60/0x60 [ 700.235273][ T8584] ? lock_downgrade+0x880/0x880 [ 700.235301][ T8584] _do_fork+0x25d/0xfe0 [ 700.235326][ T8584] ? copy_init_mm+0x20/0x20 [ 700.245605][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.245621][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 700.245635][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 700.245654][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 700.255659][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 700.255679][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 700.255695][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 700.255715][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 700.265372][ T8584] RIP: 0023:0xf7f16849 [ 700.265386][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 700.265394][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 700.265407][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 700.265420][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 700.274378][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 700.274387][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 700.274394][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.313722][ T8584] memory: usage 9948kB, limit 0kB, failcnt 38 [ 700.322987][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 700.353097][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 700.363358][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:2912KB rss_huge:2048KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:2912KB inactive_file:132KB active_file:0KB unevictable:0KB [ 700.437910][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=28616,uid=0 [ 700.461612][T29377] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.462160][ T8584] Memory cgroup out of memory: Killed process 28616 (syz-executor.3) total-vm:72320kB, anon-rss:2204kB, file-rss:35564kB, shmem-rss:0kB [ 700.469359][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.495544][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 700.497834][ T2991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.509646][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 700.522573][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.532630][ T8580] Call Trace: [ 700.535930][ T8580] dump_stack+0x172/0x1f0 [ 700.540275][ T8580] dump_header+0x10f/0xb6c [ 700.544700][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 700.550518][ T8580] ? ___ratelimit+0x60/0x595 [ 700.555105][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 700.555125][ T8580] oom_kill_process.cold+0x10/0x15 [ 700.555141][ T8580] out_of_memory+0x79a/0x1280 [ 700.555162][ T8580] ? oom_killer_disable+0x280/0x280 [ 700.555174][ T8580] ? find_held_lock+0x35/0x130 [ 700.555198][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 700.555212][ T8580] ? memcg_event_wake+0x230/0x230 [ 700.555230][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 700.555251][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 700.564971][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.565444][ T8580] try_charge+0x102c/0x15c0 [ 700.572462][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.575271][ T8580] ? find_held_lock+0x35/0x130 [ 700.575294][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 700.575308][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 700.575320][ T8580] ? find_held_lock+0x35/0x130 [ 700.575335][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 700.575361][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 700.575376][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 700.575392][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 700.575412][ T8580] __memcg_kmem_charge+0x136/0x300 [ 700.585682][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 700.585698][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.585714][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 700.585731][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 700.585759][ T8580] copy_process.part.0+0x4a0/0x6790 [ 700.597117][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.600687][ T8580] ? __might_fault+0x12b/0x1e0 [ 700.608804][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.613731][ T8580] ? __cleanup_sighand+0x60/0x60 [ 700.631952][ T8580] ? lock_downgrade+0x880/0x880 [ 700.639575][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.642222][ T8580] _do_fork+0x25d/0xfe0 [ 700.652652][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.653292][ T8580] ? copy_init_mm+0x20/0x20 [ 700.660657][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.663990][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 700.669140][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.674416][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 700.674430][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 700.674450][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 700.687749][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 700.691812][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 700.701313][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 700.705027][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 700.705047][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 700.705066][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 700.705076][ T8580] RIP: 0023:0xf7ff2849 [ 700.705092][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 700.705099][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 700.705112][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 700.705120][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 700.705132][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 700.880490][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 700.888444][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.899023][ T8580] memory: usage 38080kB, limit 0kB, failcnt 38 [ 700.910040][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 700.911450][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 700.925345][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 700.931496][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 700.932280][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:30532KB rss_huge:28672KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:30532KB inactive_file:132KB active_file:0KB unevictable:0KB [ 700.952648][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.962404][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12237,uid=0 [ 700.962508][ T8580] Memory cgroup out of memory: Killed process 12237 (syz-executor.1) total-vm:72452kB, anon-rss:2200kB, file-rss:35564kB, shmem-rss:0kB [ 700.970156][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 700.979123][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 700.995600][ T8584] CPU: 1 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 701.005221][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 701.011725][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.024925][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 701.027374][ T8584] Call Trace: [ 701.040204][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.045207][ T8584] dump_stack+0x172/0x1f0 [ 701.045229][ T8584] dump_header+0x10f/0xb6c [ 701.045262][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 701.053748][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 701.056320][ T8584] ? ___ratelimit+0x60/0x595 [ 701.056334][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 701.056353][ T8584] oom_kill_process.cold+0x10/0x15 [ 701.056370][ T8584] out_of_memory+0x79a/0x1280 [ 701.056391][ T8584] ? oom_killer_disable+0x280/0x280 [ 701.056402][ T8584] ? find_held_lock+0x35/0x130 [ 701.056424][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 701.071106][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 701.072821][ T8584] ? memcg_event_wake+0x230/0x230 [ 701.080966][T29377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 701.086386][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 701.086402][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 701.086421][ T8584] try_charge+0x102c/0x15c0 [ 701.086434][ T8584] ? find_held_lock+0x35/0x130 [ 701.086455][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 701.086468][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 701.086484][ T8584] ? find_held_lock+0x35/0x130 [ 701.094362][ C0] net_ratelimit: 18 callbacks suppressed [ 701.094370][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.096148][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 701.101287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.105919][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 701.105934][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 701.105952][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 701.115878][ T8584] __memcg_kmem_charge+0x136/0x300 [ 701.129084][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 701.129098][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 701.129114][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 701.129130][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 701.129151][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 701.129169][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 701.136482][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 701.141944][ T8584] ? kasan_check_read+0x11/0x20 [ 701.162875][T29377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.166624][ T8584] copy_process.part.0+0x4a0/0x6790 [ 701.166640][ T8584] ? __might_fault+0x12b/0x1e0 [ 701.166662][ T8584] ? __cleanup_sighand+0x60/0x60 [ 701.166677][ T8584] ? lock_downgrade+0x880/0x880 [ 701.166703][ T8584] _do_fork+0x25d/0xfe0 [ 701.166721][ T8584] ? copy_init_mm+0x20/0x20 [ 701.166743][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 701.166757][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 701.166777][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 701.166791][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 701.166805][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 701.166820][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 701.166835][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 701.166852][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 701.166864][ T8584] RIP: 0023:0xf7f16849 [ 701.166877][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 701.166883][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 701.166906][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 701.166914][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 701.166920][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 701.166928][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 701.166936][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.186860][ T8584] memory: usage 7596kB, limit 0kB, failcnt 44 [ 701.224445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.227300][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 701.233549][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.244884][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 701.272829][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:724KB rss_huge:0KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:724KB inactive_file:132KB active_file:0KB unevictable:0KB [ 701.289979][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20588,uid=0 [ 701.356114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.377649][ T8584] Memory cgroup out of memory: Killed process 20588 (syz-executor.3) total-vm:72320kB, anon-rss:156kB, file-rss:35620kB, shmem-rss:8kB [ 701.379312][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.393200][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 701.426757][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 701.443485][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.443491][ T8580] Call Trace: [ 701.443511][ T8580] dump_stack+0x172/0x1f0 [ 701.443532][ T8580] dump_header+0x10f/0xb6c [ 701.471717][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 701.471732][ T8580] ? ___ratelimit+0x60/0x595 [ 701.471757][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 701.492709][ T8580] oom_kill_process.cold+0x10/0x15 [ 701.492726][ T8580] out_of_memory+0x79a/0x1280 [ 701.492751][ T8580] ? oom_killer_disable+0x280/0x280 [ 701.506724][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.512257][ T8580] ? find_held_lock+0x35/0x130 [ 701.524124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.531828][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 701.531846][ T8580] ? memcg_event_wake+0x230/0x230 [ 701.574522][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 701.574539][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 701.574558][ T8580] try_charge+0x102c/0x15c0 [ 701.574569][ T8580] ? find_held_lock+0x35/0x130 [ 701.574588][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 701.574602][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 701.574616][ T8580] ? find_held_lock+0x35/0x130 [ 701.574630][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 701.574660][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 701.594952][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 701.594971][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 701.594988][ T8580] __memcg_kmem_charge+0x136/0x300 [ 701.595005][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 701.595024][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 701.625667][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 701.625685][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 701.625711][ T8580] copy_process.part.0+0x4a0/0x6790 [ 701.625726][ T8580] ? __might_fault+0x12b/0x1e0 [ 701.625752][ T8580] ? __cleanup_sighand+0x60/0x60 [ 701.646319][ T8580] ? lock_downgrade+0x880/0x880 [ 701.646346][ T8580] _do_fork+0x25d/0xfe0 [ 701.646365][ T8580] ? copy_init_mm+0x20/0x20 [ 701.646386][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 701.646401][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 701.646415][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 701.646428][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 701.646439][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 701.646454][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 701.646460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 701.646471][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 701.646487][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 701.646498][ T8580] RIP: 0023:0xf7ff2849 [ 701.646513][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 701.646518][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 701.646523][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 701.646536][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 701.646544][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 701.646551][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 701.646558][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 701.646565][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.669197][ T8580] memory: usage 35760kB, limit 0kB, failcnt 44 [ 701.684754][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 701.690905][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 701.690912][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:28372KB rss_huge:26624KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:28372KB inactive_file:132KB active_file:0KB unevictable:0KB [ 701.705021][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28877,uid=0 [ 701.711539][ T8580] Memory cgroup out of memory: Killed process 28877 (syz-executor.1) total-vm:72584kB, anon-rss:2200kB, file-rss:35564kB, shmem-rss:0kB [ 701.726928][ T8584] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 701.755817][ T8584] CPU: 1 PID: 8584 Comm: syz-executor.3 Not tainted 5.2.0-rc1+ #2 [ 701.764122][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.764129][ T8584] Call Trace: [ 701.764151][ T8584] dump_stack+0x172/0x1f0 [ 701.764172][ T8584] dump_header+0x10f/0xb6c [ 701.764191][ T8584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 701.774322][ T8584] ? ___ratelimit+0x60/0x595 [ 701.774342][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 701.774360][ T8584] oom_kill_process.cold+0x10/0x15 [ 701.774376][ T8584] out_of_memory+0x79a/0x1280 [ 701.774399][ T8584] ? oom_killer_disable+0x280/0x280 [ 701.774409][ T8584] ? find_held_lock+0x35/0x130 [ 701.774430][ T8584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 701.774444][ T8584] ? memcg_event_wake+0x230/0x230 [ 701.774463][ T8584] ? do_raw_spin_unlock+0x57/0x270 [ 701.774476][ T8584] ? _raw_spin_unlock+0x2d/0x50 [ 701.774494][ T8584] try_charge+0x102c/0x15c0 [ 701.774505][ T8584] ? find_held_lock+0x35/0x130 [ 701.774527][ T8584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 701.774539][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 701.774550][ T8584] ? find_held_lock+0x35/0x130 [ 701.774564][ T8584] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 701.774588][ T8584] __memcg_kmem_charge_memcg+0x7c/0x130 [ 701.774601][ T8584] ? memcg_kmem_put_cache+0xb0/0xb0 [ 701.774618][ T8584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 701.774637][ T8584] __memcg_kmem_charge+0x136/0x300 [ 701.798315][ T8584] __alloc_pages_nodemask+0x4bd/0x8d0 [ 701.798332][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 701.798349][ T8584] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 701.798364][ T8584] ? copy_process.part.0+0x43f7/0x6790 [ 701.798380][ T8584] ? lockdep_hardirqs_on+0x418/0x5d0 [ 701.798394][ T8584] ? trace_hardirqs_on+0x67/0x220 [ 701.798405][ T8584] ? kasan_check_read+0x11/0x20 [ 701.798428][ T8584] copy_process.part.0+0x4a0/0x6790 [ 701.812549][ T8584] ? __might_fault+0x12b/0x1e0 [ 701.812577][ T8584] ? __cleanup_sighand+0x60/0x60 [ 701.812597][ T8584] ? lock_downgrade+0x880/0x880 [ 701.828523][ T8584] _do_fork+0x25d/0xfe0 [ 701.828545][ T8584] ? copy_init_mm+0x20/0x20 [ 701.828568][ T8584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 701.828583][ T8584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 701.828597][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 701.828609][ T8584] ? entry_SYSENTER_compat+0x70/0x7f [ 701.828621][ T8584] ? do_fast_syscall_32+0xd1/0xd7d [ 701.828638][ T8584] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 701.828657][ T8584] do_fast_syscall_32+0x27b/0xd7d [ 701.844605][ T8584] entry_SYSENTER_compat+0x70/0x7f [ 701.844618][ T8584] RIP: 0023:0xf7f16849 [ 701.844633][ T8584] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 701.844640][ T8584] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 701.844652][ T8584] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 701.844660][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000579d7968 [ 701.844667][ T8584] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 701.844674][ T8584] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 701.844680][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.851958][ T8584] memory: usage 7340kB, limit 0kB, failcnt 50 [ 702.264460][ T8584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 702.278750][ T8584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 702.286757][ T8584] Memory cgroup stats for /syz3: cache:96KB rss:724KB rss_huge:0KB shmem:100KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:132KB active_anon:724KB inactive_file:132KB active_file:0KB unevictable:0KB [ 702.312785][ T8584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20601,uid=0 [ 702.331875][ T8584] Memory cgroup out of memory: Killed process 20601 (syz-executor.3) total-vm:72452kB, anon-rss:164kB, file-rss:35612kB, shmem-rss:8kB [ 702.347830][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 702.366616][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 702.374441][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.384487][ T8580] Call Trace: [ 702.384509][ T8580] dump_stack+0x172/0x1f0 [ 702.384528][ T8580] dump_header+0x10f/0xb6c [ 702.384543][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 702.384557][ T8580] ? ___ratelimit+0x60/0x595 [ 702.384570][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 702.384589][ T8580] oom_kill_process.cold+0x10/0x15 [ 702.392174][ T8580] out_of_memory+0x79a/0x1280 [ 702.402400][ T8580] ? oom_killer_disable+0x280/0x280 [ 702.426957][ T8580] ? find_held_lock+0x35/0x130 [ 702.431707][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 702.437238][ T8580] ? memcg_event_wake+0x230/0x230 [ 702.442248][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 702.447342][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 702.452175][ T8580] try_charge+0x102c/0x15c0 [ 702.456657][ T8580] ? find_held_lock+0x35/0x130 [ 702.461444][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 702.466981][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 702.472505][ T8580] ? find_held_lock+0x35/0x130 [ 702.477251][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 702.482797][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 702.488325][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 702.493501][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 702.499030][ T8580] __memcg_kmem_charge+0x136/0x300 [ 702.504125][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 702.509481][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 702.515706][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 702.521406][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 702.526848][ T8580] copy_process.part.0+0x4a0/0x6790 [ 702.532044][ T8580] ? __might_fault+0x12b/0x1e0 [ 702.536804][ T8580] ? __cleanup_sighand+0x60/0x60 [ 702.541719][ T8580] ? lock_downgrade+0x880/0x880 [ 702.546567][ T8580] _do_fork+0x25d/0xfe0 [ 702.550709][ T8580] ? copy_init_mm+0x20/0x20 [ 702.555214][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 702.561432][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 702.566892][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 702.571982][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 702.577247][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 702.582335][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 702.588050][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 702.593054][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 702.598142][ T8580] RIP: 0023:0xf7ff2849 [ 702.602188][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 702.621812][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 702.630224][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 702.638174][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 702.646121][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 702.654937][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 702.662885][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.671915][ T8580] memory: usage 33408kB, limit 0kB, failcnt 50 [ 702.678160][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 702.686014][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 702.692884][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:26220KB rss_huge:24576KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:26220KB inactive_file:132KB active_file:0KB unevictable:0KB [ 702.715016][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28921,uid=0 [ 702.715120][ T8580] Memory cgroup out of memory: Killed process 28921 (syz-executor.1) total-vm:72452kB, anon-rss:2196kB, file-rss:35568kB, shmem-rss:0kB [ 702.725615][T29377] Memory cgroup out of memory: Killed process 29377 (syz-executor.5) total-vm:72188kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 702.751513][ T8584] Memory cgroup out of memory: Killed process 20576 (syz-executor.3) total-vm:72320kB, anon-rss:156kB, file-rss:35612kB, shmem-rss:8kB [ 702.764909][ T1042] oom_reaper: reaped process 29377 (syz-executor.5), now anon-rss:0kB, file-rss:34156kB, shmem-rss:0kB [ 702.786299][ T8580] Memory cgroup out of memory: Killed process 28955 (syz-executor.1) total-vm:72452kB, anon-rss:2196kB, file-rss:35568kB, shmem-rss:0kB [ 702.815425][ T1042] oom_reaper: reaped process 28955 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 702.833842][ T8584] Memory cgroup out of memory: Killed process 20609 (syz-executor.3) total-vm:72320kB, anon-rss:156kB, file-rss:35612kB, shmem-rss:8kB [ 702.855829][ T1042] oom_reaper: reaped process 20609 (syz-executor.3), now anon-rss:0kB, file-rss:34872kB, shmem-rss:8kB [ 702.881041][ T8580] Memory cgroup out of memory: Killed process 28995 (syz-executor.1) total-vm:72452kB, anon-rss:2196kB, file-rss:35568kB, shmem-rss:0kB [ 702.924725][ T8584] Memory cgroup out of memory: Killed process 20498 (syz-executor.3) total-vm:72452kB, anon-rss:164kB, file-rss:35584kB, shmem-rss:8kB [ 703.042495][ T8580] Memory cgroup out of memory: Killed process 28573 (syz-executor.1) total-vm:72848kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 703.066227][ T1042] oom_reaper: reaped process 28573 (syz-executor.1), now anon-rss:0kB, file-rss:34684kB, shmem-rss:0kB [ 703.078808][ T8584] Memory cgroup out of memory: Killed process 8584 (syz-executor.3) total-vm:72188kB, anon-rss:112kB, file-rss:35556kB, shmem-rss:0kB [ 703.126448][ T1042] oom_reaper: reaped process 8584 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 703.145154][ T8580] oom_kill_process: 8 callbacks suppressed [ 703.145171][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 703.185141][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 703.192969][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.203015][ T8580] Call Trace: [ 703.206304][ T8580] dump_stack+0x172/0x1f0 [ 703.210644][ T8580] dump_header+0x10f/0xb6c [ 703.215058][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 703.220865][ T8580] ? ___ratelimit+0x60/0x595 [ 703.225461][ T8580] oom_kill_process.cold+0x10/0x15 [ 703.230571][ T8580] out_of_memory+0x79a/0x1280 [ 703.235257][ T8580] ? oom_killer_disable+0x280/0x280 [ 703.240451][ T8580] ? find_held_lock+0x35/0x130 [ 703.245219][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 703.250774][ T8580] ? memcg_event_wake+0x230/0x230 [ 703.255816][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 703.260924][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 703.265774][ T8580] try_charge+0x102c/0x15c0 [ 703.270268][ T8580] ? find_held_lock+0x35/0x130 [ 703.275034][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 703.280576][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 703.286123][ T8580] ? find_held_lock+0x35/0x130 [ 703.290879][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 703.296432][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 703.301973][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 703.307176][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 703.312717][ T8580] __memcg_kmem_charge+0x136/0x300 [ 703.317842][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 703.323208][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.329450][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 703.335169][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 703.340631][ T8580] copy_process.part.0+0x4a0/0x6790 [ 703.345832][ T8580] ? __might_fault+0x12b/0x1e0 [ 703.350606][ T8580] ? __cleanup_sighand+0x60/0x60 [ 703.355536][ T8580] ? lock_downgrade+0x880/0x880 [ 703.360401][ T8580] _do_fork+0x25d/0xfe0 [ 703.364563][ T8580] ? copy_init_mm+0x20/0x20 [ 703.369075][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.375311][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 703.380764][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 703.386049][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 703.391332][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 703.396446][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 703.402165][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 703.407188][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 703.412288][ T8580] RIP: 0023:0xf7ff2849 [ 703.416352][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 703.435952][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 703.444356][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 703.452318][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 703.460283][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 703.468247][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 703.476213][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 703.541524][ T8580] memory: usage 24192kB, limit 0kB, failcnt 158 [ 703.547901][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 703.559801][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 703.568375][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:17596KB rss_huge:16384KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:17596KB inactive_file:132KB active_file:0KB unevictable:0KB [ 703.596796][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12403,uid=0 [ 703.640270][ T8580] Memory cgroup out of memory: Killed process 12403 (syz-executor.1) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 703.681760][ T1042] oom_reaper: reaped process 12403 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 703.725526][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 703.754352][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 703.762181][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.772230][ T8580] Call Trace: [ 703.775529][ T8580] dump_stack+0x172/0x1f0 [ 703.779869][ T8580] dump_header+0x10f/0xb6c [ 703.784283][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 703.790085][ T8580] ? ___ratelimit+0x60/0x595 [ 703.794671][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 703.799790][ T8580] oom_kill_process.cold+0x10/0x15 [ 703.804900][ T8580] out_of_memory+0x79a/0x1280 [ 703.809659][ T8580] ? lock_downgrade+0x880/0x880 [ 703.814520][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.820774][ T8580] ? oom_killer_disable+0x280/0x280 [ 703.825985][ T8580] ? find_held_lock+0x35/0x130 [ 703.830759][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 703.836300][ T8580] ? memcg_event_wake+0x230/0x230 [ 703.841336][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 703.846447][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 703.851302][ T8580] try_charge+0x102c/0x15c0 [ 703.855808][ T8580] ? find_held_lock+0x35/0x130 [ 703.860840][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 703.866414][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 703.871956][ T8580] ? find_held_lock+0x35/0x130 [ 703.876721][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 703.882272][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 703.887830][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 703.893026][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 703.898583][ T8580] __memcg_kmem_charge+0x136/0x300 [ 703.903747][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 703.909121][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.915364][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 703.921094][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 703.926578][ T8580] copy_process.part.0+0x4a0/0x6790 [ 703.931775][ T8580] ? __might_fault+0x12b/0x1e0 [ 703.936555][ T8580] ? __cleanup_sighand+0x60/0x60 [ 703.941490][ T8580] ? lock_downgrade+0x880/0x880 [ 703.946355][ T8580] _do_fork+0x25d/0xfe0 [ 703.950511][ T8580] ? copy_init_mm+0x20/0x20 [ 703.955208][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.961445][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 703.967904][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 703.973021][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 703.978307][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 703.983420][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 703.989235][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 703.994280][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 703.999391][ T8580] RIP: 0023:0xf7ff2849 [ 704.003459][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 704.024888][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 704.033342][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 704.041314][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 704.049280][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 704.057248][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 704.065216][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.081373][ T8580] memory: usage 21876kB, limit 0kB, failcnt 170 [ 704.091783][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 704.091796][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 704.113479][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:15444KB rss_huge:14336KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:15444KB inactive_file:132KB active_file:0KB unevictable:0KB [ 704.143145][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12541,uid=0 [ 704.166259][ T8580] Memory cgroup out of memory: Killed process 12541 (syz-executor.1) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 704.210852][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 704.229354][ T8580] CPU: 0 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 704.237173][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.247215][ T8580] Call Trace: [ 704.250507][ T8580] dump_stack+0x172/0x1f0 [ 704.254846][ T8580] dump_header+0x10f/0xb6c [ 704.259260][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 704.265063][ T8580] ? ___ratelimit+0x60/0x595 [ 704.269658][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 704.274767][ T8580] oom_kill_process.cold+0x10/0x15 [ 704.279876][ T8580] out_of_memory+0x79a/0x1280 [ 704.284547][ T8580] ? lock_downgrade+0x880/0x880 [ 704.289390][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 704.295627][ T8580] ? oom_killer_disable+0x280/0x280 [ 704.300826][ T8580] ? find_held_lock+0x35/0x130 [ 704.305593][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 704.311222][ T8580] ? memcg_event_wake+0x230/0x230 [ 704.316246][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 704.321352][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 704.326201][ T8580] try_charge+0x102c/0x15c0 [ 704.330694][ T8580] ? find_held_lock+0x35/0x130 [ 704.335461][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 704.341001][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 704.346542][ T8580] ? find_held_lock+0x35/0x130 [ 704.351302][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 704.356854][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 704.362396][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 704.367595][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 704.373141][ T8580] __memcg_kmem_charge+0x136/0x300 [ 704.378252][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 704.383625][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 704.389878][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 704.395596][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 704.401071][ T8580] copy_process.part.0+0x4a0/0x6790 [ 704.406268][ T8580] ? __might_fault+0x12b/0x1e0 [ 704.411042][ T8580] ? __cleanup_sighand+0x60/0x60 [ 704.415974][ T8580] ? lock_downgrade+0x880/0x880 [ 704.420842][ T8580] _do_fork+0x25d/0xfe0 [ 704.425001][ T8580] ? copy_init_mm+0x20/0x20 [ 704.429520][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 704.435757][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 704.441216][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 704.446325][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 704.451608][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 704.456730][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 704.462451][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 704.467490][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 704.472608][ T8580] RIP: 0023:0xf7ff2849 [ 704.476681][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 704.496303][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 12:22:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:22:58 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000003700)=[{r0, 0x289, 0x300}], 0x1, 0x0, 0x0, 0x0) 12:22:58 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 12:22:58 executing program 3: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x7ff, 0x3f, 0x3cc291c, 0xffffffff, 0x21eed7be, 0x1, 0x80000000, 0x0, 0x40, 0x0, 0x0, 0x6}, {0xffffffffffffffdb, 0xc, 0x100000001, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x8, 0x93, 0x2, 0x6d3e0202, 0x40, 0x14, 0x7d, 0x80000000, 0x0, 0x7f, 0x3, 0x8}], 0x200}) r0 = syz_open_procfs(0x0, &(0x7f0000001080)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/99, 0xaeeab80a65c56796) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000005) [ 704.504709][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 704.512678][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 704.520648][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 704.528605][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 704.536564][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.864613][ T8580] memory: usage 19560kB, limit 0kB, failcnt 176 [ 704.886577][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 704.929814][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 704.950895][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:13280KB rss_huge:12288KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:13280KB inactive_file:132KB active_file:0KB unevictable:0KB [ 704.980336][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12466,uid=0 [ 705.003137][ T8580] Memory cgroup out of memory: Killed process 12466 (syz-executor.1) total-vm:72320kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 705.025606][ T1042] oom_reaper: reaped process 12466 (syz-executor.1), now anon-rss:0kB, file-rss:34684kB, shmem-rss:0kB [ 705.050418][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 705.077916][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 705.085765][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.095821][ T8580] Call Trace: [ 705.099112][ T8580] dump_stack+0x172/0x1f0 [ 705.103441][ T8580] dump_header+0x10f/0xb6c [ 705.108150][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 705.113950][ T8580] ? ___ratelimit+0x60/0x595 [ 705.118533][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 705.123642][ T8580] oom_kill_process.cold+0x10/0x15 [ 705.128844][ T8580] out_of_memory+0x79a/0x1280 [ 705.133520][ T8580] ? lock_downgrade+0x880/0x880 [ 705.138350][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.144823][ T8580] ? oom_killer_disable+0x280/0x280 [ 705.150118][ T8580] ? find_held_lock+0x35/0x130 [ 705.154908][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 705.160432][ T8580] ? memcg_event_wake+0x230/0x230 [ 705.165438][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 705.170531][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 705.175364][ T8580] try_charge+0x102c/0x15c0 [ 705.179864][ T8580] ? find_held_lock+0x35/0x130 [ 705.184618][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 705.190145][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 705.195674][ T8580] ? find_held_lock+0x35/0x130 [ 705.200417][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 705.205964][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 705.211662][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 705.216841][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 705.222363][ T8580] __memcg_kmem_charge+0x136/0x300 [ 705.227469][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 705.232843][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.239071][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 705.244773][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 705.250231][ T8580] copy_process.part.0+0x4a0/0x6790 [ 705.255411][ T8580] ? __might_fault+0x12b/0x1e0 [ 705.260166][ T8580] ? __cleanup_sighand+0x60/0x60 [ 705.265091][ T8580] ? lock_downgrade+0x880/0x880 [ 705.269936][ T8580] _do_fork+0x25d/0xfe0 [ 705.274432][ T8580] ? copy_init_mm+0x20/0x20 [ 705.278923][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.285145][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 705.290586][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 705.295768][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 705.301039][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 705.306134][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 705.311846][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 705.316996][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 705.322184][ T8580] RIP: 0023:0xf7ff2849 [ 705.326230][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 705.345834][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 705.354228][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 705.362178][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 705.370142][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 705.378089][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 705.386039][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.395377][ T8580] memory: usage 17268kB, limit 0kB, failcnt 194 [ 705.401635][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 705.409160][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 705.416181][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:11128KB rss_huge:10240KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:11128KB inactive_file:132KB active_file:0KB unevictable:0KB [ 705.438191][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12506,uid=0 [ 705.453972][ T8580] Memory cgroup out of memory: Killed process 12506 (syz-executor.1) total-vm:72320kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 705.469003][ T1042] oom_reaper: reaped process 12506 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 705.476092][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 705.492382][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 705.500382][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.500394][ T8580] Call Trace: [ 705.513713][ T8580] dump_stack+0x172/0x1f0 [ 705.518029][ T8580] dump_header+0x10f/0xb6c [ 705.522431][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 705.528309][ T8580] ? ___ratelimit+0x60/0x595 [ 705.532901][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 705.538002][ T8580] oom_kill_process.cold+0x10/0x15 [ 705.543098][ T8580] out_of_memory+0x79a/0x1280 [ 705.547757][ T8580] ? lock_downgrade+0x880/0x880 [ 705.552596][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.558819][ T8580] ? oom_killer_disable+0x280/0x280 [ 705.563997][ T8580] ? find_held_lock+0x35/0x130 [ 705.568752][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 705.574380][ T8580] ? memcg_event_wake+0x230/0x230 [ 705.579395][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 705.584493][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 705.589331][ T8580] try_charge+0x102c/0x15c0 [ 705.593813][ T8580] ? find_held_lock+0x35/0x130 [ 705.598588][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 705.604113][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 705.609642][ T8580] ? find_held_lock+0x35/0x130 [ 705.614387][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 705.619924][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 705.625453][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 705.630654][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 705.636185][ T8580] __memcg_kmem_charge+0x136/0x300 [ 705.641306][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 705.646661][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.652897][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 705.658600][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 705.664047][ T8580] copy_process.part.0+0x4a0/0x6790 [ 705.669239][ T8580] ? __might_fault+0x12b/0x1e0 [ 705.673990][ T8580] ? __cleanup_sighand+0x60/0x60 [ 705.678911][ T8580] ? lock_downgrade+0x880/0x880 [ 705.683765][ T8580] _do_fork+0x25d/0xfe0 [ 705.687927][ T8580] ? copy_init_mm+0x20/0x20 [ 705.692426][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.698652][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 705.704103][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 705.709385][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 705.714653][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 705.719748][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 705.725463][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 705.730474][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 705.735564][ T8580] RIP: 0023:0xf7ff2849 [ 705.739618][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 705.759202][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 705.767764][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 705.775804][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 705.783755][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 705.792061][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 705.800019][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.817384][ T8580] memory: usage 14916kB, limit 0kB, failcnt 200 [ 705.823650][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 705.837618][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 705.847297][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:8968KB rss_huge:8192KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:8968KB inactive_file:132KB active_file:0KB unevictable:0KB [ 705.875181][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28548,uid=0 [ 705.898058][ T8580] Memory cgroup out of memory: Killed process 28548 (syz-executor.1) total-vm:72320kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 705.921596][ T1042] oom_reaper: reaped process 28548 (syz-executor.1), now anon-rss:0kB, file-rss:34684kB, shmem-rss:0kB [ 705.933527][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 705.951574][ T8580] CPU: 0 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 705.959422][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.970617][ T8580] Call Trace: [ 705.970642][ T8580] dump_stack+0x172/0x1f0 [ 705.970661][ T8580] dump_header+0x10f/0xb6c [ 705.970675][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 705.970689][ T8580] ? ___ratelimit+0x60/0x595 [ 705.970700][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 705.970720][ T8580] oom_kill_process.cold+0x10/0x15 [ 705.978412][ T8580] out_of_memory+0x79a/0x1280 [ 705.988578][ T8580] ? lock_downgrade+0x880/0x880 [ 705.988593][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 705.988608][ T8580] ? oom_killer_disable+0x280/0x280 [ 705.988618][ T8580] ? find_held_lock+0x35/0x130 [ 705.988644][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 705.998298][ T8580] ? memcg_event_wake+0x230/0x230 [ 706.008059][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 706.008074][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 706.008093][ T8580] try_charge+0x102c/0x15c0 [ 706.008110][ T8580] ? find_held_lock+0x35/0x130 [ 706.019350][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 706.029287][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 706.040014][ T8580] ? find_held_lock+0x35/0x130 [ 706.049954][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 706.059196][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 706.070235][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 706.080505][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 706.091330][ T8580] __memcg_kmem_charge+0x136/0x300 [ 706.101935][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 706.101954][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.113527][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 706.119236][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 706.119262][ T8580] copy_process.part.0+0x4a0/0x6790 [ 706.119279][ T8580] ? __might_fault+0x12b/0x1e0 [ 706.119300][ T8580] ? __cleanup_sighand+0x60/0x60 [ 706.129929][ T8580] ? lock_downgrade+0x880/0x880 [ 706.144455][ T8580] _do_fork+0x25d/0xfe0 [ 706.148642][ T8580] ? copy_init_mm+0x20/0x20 [ 706.153168][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.159575][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 706.165065][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 706.170264][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 706.175526][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 706.180620][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 706.186322][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 706.191329][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 706.196414][ T8580] RIP: 0023:0xf7ff2849 [ 706.200459][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 706.220111][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 706.228508][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 706.236564][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 706.244529][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 706.252500][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 706.260511][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.273801][ T8580] memory: usage 12572kB, limit 0kB, failcnt 206 [ 706.274632][ C1] net_ratelimit: 24 callbacks suppressed [ 706.274640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 706.280135][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.285808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 706.291527][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.299045][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 706.304731][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:6808KB rss_huge:6144KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:6808KB inactive_file:132KB active_file:0KB unevictable:0KB [ 706.311571][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 706.317265][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28585,uid=0 [ 706.338975][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 706.344738][ T8580] Memory cgroup out of memory: Killed process 28585 (syz-executor.1) total-vm:72320kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 706.360022][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 706.387546][ T1042] oom_reaper: reaped process 28585 (syz-executor.1), now anon-rss:0kB, file-rss:34684kB, shmem-rss:0kB [ 706.402489][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 706.414913][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 706.422739][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.432797][ T8580] Call Trace: [ 706.436096][ T8580] dump_stack+0x172/0x1f0 [ 706.440436][ T8580] dump_header+0x10f/0xb6c [ 706.444868][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 706.450680][ T8580] ? ___ratelimit+0x60/0x595 [ 706.455273][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 706.460392][ T8580] oom_kill_process.cold+0x10/0x15 [ 706.465519][ T8580] out_of_memory+0x79a/0x1280 [ 706.470206][ T8580] ? lock_downgrade+0x880/0x880 [ 706.475062][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.481306][ T8580] ? oom_killer_disable+0x280/0x280 [ 706.486593][ T8580] ? find_held_lock+0x35/0x130 [ 706.491479][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 706.497028][ T8580] ? memcg_event_wake+0x230/0x230 [ 706.502507][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 706.507620][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 706.512575][ T8580] try_charge+0x102c/0x15c0 [ 706.517090][ T8580] ? find_held_lock+0x35/0x130 [ 706.521682][T29419] IPVS: ftp: loaded support on port[0] = 21 [ 706.521861][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 706.533258][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 706.538799][ T8580] ? find_held_lock+0x35/0x130 [ 706.538814][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 706.538840][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 706.538853][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 706.538873][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 706.538889][ T8580] __memcg_kmem_charge+0x136/0x300 [ 706.538907][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 706.538923][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.538938][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 706.538954][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 706.538980][ T8580] copy_process.part.0+0x4a0/0x6790 [ 706.538995][ T8580] ? __might_fault+0x12b/0x1e0 [ 706.539016][ T8580] ? __cleanup_sighand+0x60/0x60 [ 706.539030][ T8580] ? lock_downgrade+0x880/0x880 [ 706.539057][ T8580] _do_fork+0x25d/0xfe0 [ 706.539074][ T8580] ? copy_init_mm+0x20/0x20 [ 706.539096][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.539111][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 706.539125][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 706.539142][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 706.539153][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 706.539169][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 706.539187][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 706.555002][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 706.555015][ T8580] RIP: 0023:0xf7ff2849 [ 706.555028][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 706.555035][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 706.555052][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 706.565747][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 706.565755][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 706.565762][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 706.565773][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.574171][ T8580] memory: usage 10284kB, limit 0kB, failcnt 296 [ 706.582919][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.582929][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.582936][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:4664KB rss_huge:4096KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:4664KB inactive_file:132KB active_file:0KB unevictable:0KB [ 706.583009][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28608,uid=0 [ 706.583118][ T8580] Memory cgroup out of memory: Killed process 28608 (syz-executor.1) total-vm:72320kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 706.603728][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 706.618540][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 706.625991][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.625996][ T8580] Call Trace: [ 706.626016][ T8580] dump_stack+0x172/0x1f0 [ 706.626037][ T8580] dump_header+0x10f/0xb6c [ 706.626052][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 706.626069][ T8580] ? ___ratelimit+0x60/0x595 [ 706.637749][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 706.637769][ T8580] oom_kill_process.cold+0x10/0x15 [ 706.637785][ T8580] out_of_memory+0x79a/0x1280 [ 706.637799][ T8580] ? lock_downgrade+0x880/0x880 [ 706.637816][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.648182][ T8580] ? oom_killer_disable+0x280/0x280 [ 706.648194][ T8580] ? find_held_lock+0x35/0x130 [ 706.648217][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 706.648233][ T8580] ? memcg_event_wake+0x230/0x230 [ 706.659024][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 706.659040][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 706.659062][ T8580] try_charge+0x102c/0x15c0 [ 706.659077][ T8580] ? find_held_lock+0x35/0x130 [ 706.669173][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 706.692808][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 706.692822][ T8580] ? find_held_lock+0x35/0x130 [ 706.692836][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 706.692863][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 706.701532][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 706.709386][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 706.709405][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 706.709424][ T8580] __memcg_kmem_charge+0x136/0x300 [ 706.717467][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 706.725429][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 706.725454][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.725472][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 706.741409][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 706.755069][ T8580] copy_process.part.0+0x4a0/0x6790 [ 706.755087][ T8580] ? __might_fault+0x12b/0x1e0 [ 706.755110][ T8580] ? __cleanup_sighand+0x60/0x60 [ 706.783526][ T8580] ? lock_downgrade+0x880/0x880 [ 706.783549][ T8580] _do_fork+0x25d/0xfe0 [ 706.783568][ T8580] ? copy_init_mm+0x20/0x20 [ 706.783590][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 706.783608][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 706.812975][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 706.812990][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 706.813002][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 706.813019][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 706.813037][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 706.832621][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 706.845928][ T8580] RIP: 0023:0xf7ff2849 [ 706.845943][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 706.845950][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 706.845962][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 706.845969][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 706.845976][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 706.845987][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 706.854697][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.864416][ T8580] memory: usage 7992kB, limit 0kB, failcnt 302 [ 706.875700][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.884930][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.884937][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:2520KB rss_huge:2048KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:2520KB inactive_file:132KB active_file:0KB unevictable:0KB [ 706.885010][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=28639,uid=0 [ 706.901650][ T8580] Memory cgroup out of memory: Killed process 28639 (syz-executor.1) total-vm:72320kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 706.945529][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 706.958737][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 706.958751][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.969981][ T8580] Call Trace: [ 706.980602][ T8580] dump_stack+0x172/0x1f0 [ 706.991671][ T8580] dump_header+0x10f/0xb6c [ 707.003671][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 707.014284][ T8580] ? ___ratelimit+0x60/0x595 [ 707.014305][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 707.014324][ T8580] oom_kill_process.cold+0x10/0x15 [ 707.014339][ T8580] out_of_memory+0x79a/0x1280 [ 707.014356][ T8580] ? lock_downgrade+0x880/0x880 [ 707.024038][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.033001][ T8580] ? oom_killer_disable+0x280/0x280 [ 707.043722][ T8580] ? find_held_lock+0x35/0x130 [ 707.054248][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 707.064604][ T8580] ? memcg_event_wake+0x230/0x230 [ 707.064625][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 707.064640][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 707.064657][ T8580] try_charge+0x102c/0x15c0 [ 707.064667][ T8580] ? find_held_lock+0x35/0x130 [ 707.064688][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 707.075525][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 707.075540][ T8580] ? find_held_lock+0x35/0x130 [ 707.075555][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 707.075584][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 707.084747][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 707.084766][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 707.084783][ T8580] __memcg_kmem_charge+0x136/0x300 [ 707.084801][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 707.084821][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.112917][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 707.128826][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 707.128853][ T8580] copy_process.part.0+0x4a0/0x6790 [ 707.128869][ T8580] ? __might_fault+0x12b/0x1e0 [ 707.128891][ T8580] ? __cleanup_sighand+0x60/0x60 [ 707.145744][ T8580] ? lock_downgrade+0x880/0x880 [ 707.145770][ T8580] _do_fork+0x25d/0xfe0 [ 707.145788][ T8580] ? copy_init_mm+0x20/0x20 [ 707.145809][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.145827][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 707.160038][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 707.160052][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 707.160068][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 707.160089][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 707.160106][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 707.160123][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 707.174463][ T8580] RIP: 0023:0xf7ff2849 [ 707.174477][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 707.174485][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 707.174497][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 707.174504][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 707.174511][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 707.174518][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 707.174530][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.334483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 707.335849][ T8580] memory: usage 5712kB, limit 0kB, failcnt 308 [ 707.339352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 707.344057][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 707.580267][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 707.590987][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:356KB rss_huge:0KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:356KB inactive_file:132KB active_file:0KB unevictable:0KB [ 707.613829][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12914,uid=0 [ 707.629894][ T8580] Memory cgroup out of memory: Killed process 12914 (syz-executor.1) total-vm:72716kB, anon-rss:168kB, file-rss:35588kB, shmem-rss:8kB [ 707.654682][ T8580] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 707.673236][ T8580] CPU: 1 PID: 8580 Comm: syz-executor.1 Not tainted 5.2.0-rc1+ #2 [ 707.681065][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.691114][ T8580] Call Trace: [ 707.694414][ T8580] dump_stack+0x172/0x1f0 [ 707.698746][ T8580] dump_header+0x10f/0xb6c [ 707.703154][ T8580] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 707.708957][ T8580] ? ___ratelimit+0x60/0x595 [ 707.713540][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 707.718655][ T8580] oom_kill_process.cold+0x10/0x15 [ 707.723769][ T8580] out_of_memory+0x79a/0x1280 [ 707.728652][ T8580] ? lock_downgrade+0x880/0x880 [ 707.733495][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.739743][ T8580] ? oom_killer_disable+0x280/0x280 [ 707.744943][ T8580] ? find_held_lock+0x35/0x130 [ 707.749741][ T8580] mem_cgroup_out_of_memory+0x1ca/0x230 [ 707.755272][ T8580] ? memcg_event_wake+0x230/0x230 [ 707.760294][ T8580] ? do_raw_spin_unlock+0x57/0x270 [ 707.765393][ T8580] ? _raw_spin_unlock+0x2d/0x50 [ 707.770229][ T8580] try_charge+0x102c/0x15c0 [ 707.775214][ T8580] ? find_held_lock+0x35/0x130 [ 707.780106][ T8580] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 707.785657][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 707.791184][ T8580] ? find_held_lock+0x35/0x130 [ 707.795930][ T8580] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 707.801567][ T8580] __memcg_kmem_charge_memcg+0x7c/0x130 [ 707.807096][ T8580] ? memcg_kmem_put_cache+0xb0/0xb0 [ 707.812276][ T8580] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 707.817810][ T8580] __memcg_kmem_charge+0x136/0x300 [ 707.822908][ T8580] __alloc_pages_nodemask+0x4bd/0x8d0 [ 707.828862][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.835109][ T8580] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 707.840814][ T8580] ? copy_process.part.0+0x43f7/0x6790 [ 707.846265][ T8580] copy_process.part.0+0x4a0/0x6790 [ 707.851552][ T8580] ? __might_fault+0x12b/0x1e0 [ 707.856299][ T8580] ? __cleanup_sighand+0x60/0x60 [ 707.861213][ T8580] ? lock_downgrade+0x880/0x880 [ 707.866064][ T8580] _do_fork+0x25d/0xfe0 [ 707.870216][ T8580] ? copy_init_mm+0x20/0x20 [ 707.874834][ T8580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 707.881054][ T8580] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 707.886491][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 707.891576][ T8580] ? entry_SYSENTER_compat+0x70/0x7f [ 707.896875][ T8580] ? do_fast_syscall_32+0xd1/0xd7d [ 707.901989][ T8580] __ia32_compat_sys_x86_clone+0xbc/0x140 [ 707.907690][ T8580] do_fast_syscall_32+0x27b/0xd7d [ 707.912694][ T8580] entry_SYSENTER_compat+0x70/0x7f [ 707.917784][ T8580] RIP: 0023:0xf7ff2849 [ 707.921829][ T8580] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 707.942736][ T8580] RSP: 002b:000000000847fd40 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 707.951131][ T8580] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 707.959107][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000058011968 [ 707.967175][ T8580] RBP: 000000000847fd98 R08: 0000000000000000 R09: 0000000000000000 [ 707.976148][ T8580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 707.984099][ T8580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.993450][ T8580] memory: usage 5432kB, limit 0kB, failcnt 314 [ 708.004181][ T8580] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 708.021473][ T8580] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 708.030225][ T8580] Memory cgroup stats for /syz1: cache:192KB rss:220KB rss_huge:0KB shmem:32KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:224KB inactive_file:132KB active_file:0KB unevictable:0KB [ 708.058051][ T8580] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12961,uid=0 [ 708.080171][ T8580] Memory cgroup out of memory: Killed process 12961 (syz-executor.1) total-vm:72320kB, anon-rss:148kB, file-rss:35604kB, shmem-rss:8kB [ 708.101373][ T1042] oom_reaper: reaped process 12961 (syz-executor.1), now anon-rss:0kB, file-rss:34864kB, shmem-rss:8kB [ 708.122261][ T8580] Memory cgroup out of memory: Killed process 8580 (syz-executor.1) total-vm:72188kB, anon-rss:104kB, file-rss:35556kB, shmem-rss:0kB [ 708.146532][ T1042] oom_reaper: reaped process 8580 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 12:23:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000000480)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:23:02 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 12:23:02 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 708.421807][T29419] chnl_net:caif_netlink_parms(): no params data found 12:23:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x228, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000900000000000000883e76657468315f746f5f7465616d000000b72d36746e6c3000000000000000000069726c616e300000000000000000000069666230000000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa000000000000000000ac000000ac000000d400000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000001000000000000000700000000000a004155444954000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000001100000000000000000076657468315f746f5f7465616d00000079616d30000000000000000000000000697036677265300000000000000000007663616e3000000000000000000000000180c2000000000000000000aaaaaaaaaaaa00000000000000009c0000009c000000c4000000637075000000000000000000000000000000000000000000000000000000000008000000000000000001000041554449540000000000000000000000000000000000000000000000000000000400000000000000"]}, 0x278) 12:23:02 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000e00)) syz_open_dev$usb(0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000200)={'icmp6\x00'}, 0x0) unshare(0x40000000) [ 708.473695][T29419] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.516534][T29419] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.546629][T29427] IPVS: ftp: loaded support on port[0] = 21 [ 708.562456][T29419] device bridge_slave_0 entered promiscuous mode 12:23:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\a\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 708.601325][T10123] device bridge_slave_1 left promiscuous mode [ 708.617245][T10123] bridge0: port 2(bridge_slave_1) entered disabled state 12:23:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0xfffffffffffffd77, 0xffffffffc4653600}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xa6fe, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:23:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x174}]}) [ 708.718734][T10123] device bridge_slave_0 left promiscuous mode [ 708.743768][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.182667][T29448] IPVS: ftp: loaded support on port[0] = 21 [ 710.554066][T29450] IPVS: ftp: loaded support on port[0] = 21 [ 711.167779][T10123] device hsr_slave_1 left promiscuous mode [ 711.210250][T10123] device hsr_slave_0 left promiscuous mode [ 711.271755][T10123] team0 (unregistering): Port device team_slave_1 removed [ 711.286055][T10123] team0 (unregistering): Port device team_slave_0 removed [ 711.299039][T10123] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 711.369508][T10123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 711.461396][T10123] bond0 (unregistering): Released all slaves [ 711.494462][ C0] net_ratelimit: 20 callbacks suppressed [ 711.494470][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 711.505910][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 711.598214][T29419] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.606630][T29419] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.614403][T29419] device bridge_slave_1 entered promiscuous mode [ 711.729474][T29419] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 711.765776][T29419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 711.879323][T29419] team0: Port device team_slave_0 added [ 711.948558][T29419] team0: Port device team_slave_1 added [ 711.997730][T29450] chnl_net:caif_netlink_parms(): no params data found [ 712.030343][T29448] chnl_net:caif_netlink_parms(): no params data found [ 712.087261][T29419] device hsr_slave_0 entered promiscuous mode [ 712.130965][T29419] device hsr_slave_1 entered promiscuous mode [ 712.280440][T29450] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.304436][T29450] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.312492][T29450] device bridge_slave_0 entered promiscuous mode [ 712.345664][T29450] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.352757][T29450] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.385383][T29450] device bridge_slave_1 entered promiscuous mode [ 712.408430][T29448] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.428223][T29448] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.455307][T29448] device bridge_slave_0 entered promiscuous mode [ 712.465864][T29448] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.472913][T29448] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.505440][T29448] device bridge_slave_1 entered promiscuous mode [ 712.534418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 712.540225][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 712.546085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 712.551840][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 712.590200][T29450] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 712.614388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 712.620206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 712.633292][T29450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 712.685950][T29448] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 712.744686][T29448] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 712.771081][T29450] team0: Port device team_slave_0 added [ 712.779521][T29450] team0: Port device team_slave_1 added [ 712.812539][T29448] team0: Port device team_slave_0 added [ 712.821347][T29448] team0: Port device team_slave_1 added [ 712.934401][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 712.940208][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 712.949114][T29448] device hsr_slave_0 entered promiscuous mode [ 713.004751][T29448] device hsr_slave_1 entered promiscuous mode [ 713.137351][T29450] device hsr_slave_0 entered promiscuous mode [ 713.194748][T29450] device hsr_slave_1 entered promiscuous mode [ 713.297396][T29419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.330664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.346392][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.373346][T29448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.388793][T29419] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.402095][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.411501][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.420620][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.427749][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.465989][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 713.474058][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 713.495094][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.503583][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.510690][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.554816][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 713.563708][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 713.572864][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 713.582277][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.591267][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 713.600508][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.611427][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.619353][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.631150][T29448] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.667704][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.685220][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 713.693701][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.702619][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 713.711117][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.755061][T29450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.763972][T29419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 713.773068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.783111][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.791886][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.798994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.807628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 713.816349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.825176][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.832243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.840068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 713.848652][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 713.879509][T29408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 713.888321][T29408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 713.906048][T29408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.930628][T29408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 713.941201][T29408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.968481][T29450] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.980318][T29419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.001332][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 714.015492][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 714.024029][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 714.040974][T29448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 714.052455][T29448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 714.073936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 714.091416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 714.106122][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 714.115773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 714.124781][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.131907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.140313][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 714.167731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 714.176265][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 714.185424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 714.193893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.201008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.226326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 714.241109][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 714.249724][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 714.259426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 714.285109][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 714.293539][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 714.303115][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 714.312248][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 714.322408][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 12:23:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:08 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='6\x05\x00\x00\x00\x00\x14\x93)\xdcB\x00\x00\x00\x00\xa5:\x97\x87\xa0\xf3\x8a5~\x86\xdf\x01\x96\xb370\xd3\xc1\x8c%\n\xabD\xb7') ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f00000001c0)) fchown(r1, r3, r4) openat$cgroup_ro(r1, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000700), &(0x7f0000000480)) r5 = socket$inet(0x10, 0x4, 0x400000003) sendmsg(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)="240000006105619ee89606b800020000001f000000000008000800", 0x1b}], 0x1}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = dup3(r0, r6, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x83, 0xffffffffffffffb4) linkat(r0, &(0x7f0000000500)='./file0\x00', r7, &(0x7f0000000440)='./file0\x00', 0x1000) futex(&(0x7f000000cffc), 0x7, 0x0, 0x0, 0x0, 0x1000000) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x400000000) r9 = memfd_create(&(0x7f0000000400)='\\cpusetwlan1-,\x00', 0x2) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f0000000680)={0xd5, 0x0, 0x1}) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, "364456278e1f3653e64feae42994d2e2fecccf8a44e198b38da579fefffffffffff7ff83e0236110b90c3f793b2b57142cfaef869f91aaf544b200", "ac805c7d77d8b45f37e866617e6a8081860c1dd3e974f844bfa7067f34d87abd", [0x400000000000000, 0xe54]}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) r10 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x3, 0x4000) recvfrom(r10, &(0x7f0000000040)=""/93, 0x5d, 0x43, 0x0, 0x0) fchmod(r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x10, &(0x7f00000002c0)={&(0x7f0000000880)=""/225, 0xe1, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x10, &(0x7f0000000240)={&(0x7f0000000a40)=""/254, 0xfe, r11}}, 0x10) 12:23:08 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0xfffffffffffffd77, 0xffffffffc4653600}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xa6fe, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:23:08 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000e00)) syz_open_dev$usb(0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000200)={'icmp6\x00'}, 0x0) unshare(0x40000000) [ 714.331556][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 714.340727][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 714.349611][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 714.358933][T26975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 714.368341][T29450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 714.452088][T29466] IPVS: ftp: loaded support on port[0] = 21 12:23:08 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='6\x05\x00\x00\x00\x00\x14\x93)\xdcB\x00\x00\x00\x00\xa5:\x97\x87\xa0\xf3\x8a5~\x86\xdf\x01\x96\xb370\xd3\xc1\x8c%\n\xabD\xb7') ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f00000001c0)) fchown(r1, r3, r4) openat$cgroup_ro(r1, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000700), &(0x7f0000000480)) r5 = socket$inet(0x10, 0x4, 0x400000003) sendmsg(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)="240000006105619ee89606b800020000001f000000000008000800", 0x1b}], 0x1}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = dup3(r0, r6, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x83, 0xffffffffffffffb4) linkat(r0, &(0x7f0000000500)='./file0\x00', r7, &(0x7f0000000440)='./file0\x00', 0x1000) futex(&(0x7f000000cffc), 0x7, 0x0, 0x0, 0x0, 0x1000000) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x400000000) r9 = memfd_create(&(0x7f0000000400)='\\cpusetwlan1-,\x00', 0x2) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f0000000680)={0xd5, 0x0, 0x1}) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, "364456278e1f3653e64feae42994d2e2fecccf8a44e198b38da579fefffffffffff7ff83e0236110b90c3f793b2b57142cfaef869f91aaf544b200", "ac805c7d77d8b45f37e866617e6a8081860c1dd3e974f844bfa7067f34d87abd", [0x400000000000000, 0xe54]}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) r10 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x3, 0x4000) recvfrom(r10, &(0x7f0000000040)=""/93, 0x5d, 0x43, 0x0, 0x0) fchmod(r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x10, &(0x7f00000002c0)={&(0x7f0000000880)=""/225, 0xe1, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x10, &(0x7f0000000240)={&(0x7f0000000a40)=""/254, 0xfe, r11}}, 0x10) [ 715.035580][T29448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.248029][T29450] 8021q: adding VLAN 0 to HW filter on device batadv0 12:23:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:09 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='6\x05\x00\x00\x00\x00\x14\x93)\xdcB\x00\x00\x00\x00\xa5:\x97\x87\xa0\xf3\x8a5~\x86\xdf\x01\x96\xb370\xd3\xc1\x8c%\n\xabD\xb7') ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f00000001c0)) fchown(r1, r3, r4) openat$cgroup_ro(r1, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000700), &(0x7f0000000480)) r5 = socket$inet(0x10, 0x4, 0x400000003) sendmsg(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)="240000006105619ee89606b800020000001f000000000008000800", 0x1b}], 0x1}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = dup3(r0, r6, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x83, 0xffffffffffffffb4) linkat(r0, &(0x7f0000000500)='./file0\x00', r7, &(0x7f0000000440)='./file0\x00', 0x1000) futex(&(0x7f000000cffc), 0x7, 0x0, 0x0, 0x0, 0x1000000) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x400000000) r9 = memfd_create(&(0x7f0000000400)='\\cpusetwlan1-,\x00', 0x2) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f0000000680)={0xd5, 0x0, 0x1}) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, "364456278e1f3653e64feae42994d2e2fecccf8a44e198b38da579fefffffffffff7ff83e0236110b90c3f793b2b57142cfaef869f91aaf544b200", "ac805c7d77d8b45f37e866617e6a8081860c1dd3e974f844bfa7067f34d87abd", [0x400000000000000, 0xe54]}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) r10 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x3, 0x4000) recvfrom(r10, &(0x7f0000000040)=""/93, 0x5d, 0x43, 0x0, 0x0) fchmod(r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x10, &(0x7f00000002c0)={&(0x7f0000000880)=""/225, 0xe1, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x10, &(0x7f0000000240)={&(0x7f0000000a40)=""/254, 0xfe, r11}}, 0x10) 12:23:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0xfffffffffffffd77, 0xffffffffc4653600}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xa6fe, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:23:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\a\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:23:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:10 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='6\x05\x00\x00\x00\x00\x14\x93)\xdcB\x00\x00\x00\x00\xa5:\x97\x87\xa0\xf3\x8a5~\x86\xdf\x01\x96\xb370\xd3\xc1\x8c%\n\xabD\xb7') ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000140)) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) fstat(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f00000001c0)) fchown(r1, r3, r4) openat$cgroup_ro(r1, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000700), &(0x7f0000000480)) r5 = socket$inet(0x10, 0x4, 0x400000003) sendmsg(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)="240000006105619ee89606b800020000001f000000000008000800", 0x1b}], 0x1}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = dup3(r0, r6, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000640)=0x83, 0xffffffffffffffb4) linkat(r0, &(0x7f0000000500)='./file0\x00', r7, &(0x7f0000000440)='./file0\x00', 0x1000) futex(&(0x7f000000cffc), 0x7, 0x0, 0x0, 0x0, 0x1000000) r8 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x400000000) r9 = memfd_create(&(0x7f0000000400)='\\cpusetwlan1-,\x00', 0x2) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f0000000680)={0xd5, 0x0, 0x1}) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, "364456278e1f3653e64feae42994d2e2fecccf8a44e198b38da579fefffffffffff7ff83e0236110b90c3f793b2b57142cfaef869f91aaf544b200", "ac805c7d77d8b45f37e866617e6a8081860c1dd3e974f844bfa7067f34d87abd", [0x400000000000000, 0xe54]}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) r10 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x3, 0x4000) recvfrom(r10, &(0x7f0000000040)=""/93, 0x5d, 0x43, 0x0, 0x0) fchmod(r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x10, &(0x7f00000002c0)={&(0x7f0000000880)=""/225, 0xe1, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r1, 0x10, &(0x7f0000000240)={&(0x7f0000000a40)=""/254, 0xfe, r11}}, 0x10) 12:23:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:10 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0xfffffffffffffeb7, 0x0, 0x0, 0x0, 0xfffffffffffffd77, 0xffffffffc4653600}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xa6fe, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:23:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\a\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:23:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\a\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:23:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\a\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 716.614785][ C0] net_ratelimit: 38 callbacks suppressed [ 716.614796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 716.626318][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:23:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\a\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 716.694370][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.700188][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 716.706024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.711785][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:23:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 716.774539][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.780476][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:23:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) [ 716.854421][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 716.860289][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:23:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\a\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 12:23:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000001c0)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x50, 0x0, &(0x7f0000000440)=[@register_looper, @transaction_sg], 0x1, 0x0, &(0x7f00000004c0)='\a'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001f00)={0x4c, 0x0, &(0x7f0000000e40)=[@transaction_sg], 0x1, 0x0, &(0x7f0000000f00)="91"}) 12:23:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x5e8aa98b) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 12:23:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0x57cf, 0x0, 0xab0, 0x203}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x8, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x1, 0x4e23, 0xfffffffffffffffa, 0xa, 0x0, 0x20, 0x3f, r2, r3}, {0x1, 0x401, 0x5c, 0x4, 0x1, 0x3f, 0x3, 0x3f}, {0x2, 0x7, 0x3, 0x1}, 0x100000000, 0x6e6bb0, 0x0, 0x1, 0x2, 0x31aac7b7cebc5295}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in=@loopback, 0x3506, 0x6, 0x233d3e0a3b96533a, 0x7, 0x7, 0x3, 0x8}}, 0xe8) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x7, {0xffffffff, 0x7fffffff, 0xbac, 0xbf75}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) 12:23:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000001c0)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x50, 0x0, &(0x7f0000000440)=[@register_looper, @transaction_sg], 0x1, 0x0, &(0x7f00000004c0)='\a'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001f00)={0x4c, 0x0, &(0x7f0000000e40)=[@transaction_sg], 0x1, 0x0, &(0x7f0000000f00)="91"}) 12:23:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0x57cf, 0x0, 0xab0, 0x203}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x8, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x1, 0x4e23, 0xfffffffffffffffa, 0xa, 0x0, 0x20, 0x3f, r2, r3}, {0x1, 0x401, 0x5c, 0x4, 0x1, 0x3f, 0x3, 0x3f}, {0x2, 0x7, 0x3, 0x1}, 0x100000000, 0x6e6bb0, 0x0, 0x1, 0x2, 0x31aac7b7cebc5295}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in=@loopback, 0x3506, 0x6, 0x233d3e0a3b96533a, 0x7, 0x7, 0x3, 0x8}}, 0xe8) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x7, {0xffffffff, 0x7fffffff, 0xbac, 0xbf75}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) 12:23:11 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0x57cf, 0x0, 0xab0, 0x203}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x8, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x1, 0x4e23, 0xfffffffffffffffa, 0xa, 0x0, 0x20, 0x3f, r2, r3}, {0x1, 0x401, 0x5c, 0x4, 0x1, 0x3f, 0x3, 0x3f}, {0x2, 0x7, 0x3, 0x1}, 0x100000000, 0x6e6bb0, 0x0, 0x1, 0x2, 0x31aac7b7cebc5295}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in=@loopback, 0x3506, 0x6, 0x233d3e0a3b96533a, 0x7, 0x7, 0x3, 0x8}}, 0xe8) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x7, {0xffffffff, 0x7fffffff, 0xbac, 0xbf75}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) 12:23:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000001c0)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x50, 0x0, &(0x7f0000000440)=[@register_looper, @transaction_sg], 0x1, 0x0, &(0x7f00000004c0)='\a'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001f00)={0x4c, 0x0, &(0x7f0000000e40)=[@transaction_sg], 0x1, 0x0, &(0x7f0000000f00)="91"}) 12:23:11 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0x57cf, 0x0, 0xab0, 0x203}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x8, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x1, 0x4e23, 0xfffffffffffffffa, 0xa, 0x0, 0x20, 0x3f, r2, r3}, {0x1, 0x401, 0x5c, 0x4, 0x1, 0x3f, 0x3, 0x3f}, {0x2, 0x7, 0x3, 0x1}, 0x100000000, 0x6e6bb0, 0x0, 0x1, 0x2, 0x31aac7b7cebc5295}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in=@loopback, 0x3506, 0x6, 0x233d3e0a3b96533a, 0x7, 0x7, 0x3, 0x8}}, 0xe8) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x7, {0xffffffff, 0x7fffffff, 0xbac, 0xbf75}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) 12:23:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xce, 0x0, &(0x7f0000000000)) 12:23:11 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0x57cf, 0x0, 0xab0, 0x203}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x8, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x1, 0x4e23, 0xfffffffffffffffa, 0xa, 0x0, 0x20, 0x3f, r2, r3}, {0x1, 0x401, 0x5c, 0x4, 0x1, 0x3f, 0x3, 0x3f}, {0x2, 0x7, 0x3, 0x1}, 0x100000000, 0x6e6bb0, 0x0, 0x1, 0x2, 0x31aac7b7cebc5295}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in=@loopback, 0x3506, 0x6, 0x233d3e0a3b96533a, 0x7, 0x7, 0x3, 0x8}}, 0xe8) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x7, {0xffffffff, 0x7fffffff, 0xbac, 0xbf75}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) 12:23:11 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0x57cf, 0x0, 0xab0, 0x203}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x8, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x1, 0x4e23, 0xfffffffffffffffa, 0xa, 0x0, 0x20, 0x3f, r2, r3}, {0x1, 0x401, 0x5c, 0x4, 0x1, 0x3f, 0x3, 0x3f}, {0x2, 0x7, 0x3, 0x1}, 0x100000000, 0x6e6bb0, 0x0, 0x1, 0x2, 0x31aac7b7cebc5295}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in=@loopback, 0x3506, 0x6, 0x233d3e0a3b96533a, 0x7, 0x7, 0x3, 0x8}}, 0xe8) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x7, {0xffffffff, 0x7fffffff, 0xbac, 0xbf75}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) 12:23:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000001c0)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x50, 0x0, &(0x7f0000000440)=[@register_looper, @transaction_sg], 0x1, 0x0, &(0x7f00000004c0)='\a'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001f00)={0x4c, 0x0, &(0x7f0000000e40)=[@transaction_sg], 0x1, 0x0, &(0x7f0000000f00)="91"}) 12:23:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0xffffff19) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x88, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffffe5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr='\x00\f\x00'}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) 12:23:12 executing program 3: prctl$PR_SET_PDEATHSIG(0x1, 0x41) 12:23:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818220196dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) 12:23:12 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0x57cf, 0x0, 0xab0, 0x203}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x8, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='autogroup\x00') getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x1, 0x4e23, 0xfffffffffffffffa, 0xa, 0x0, 0x20, 0x3f, r2, r3}, {0x1, 0x401, 0x5c, 0x4, 0x1, 0x3f, 0x3, 0x3f}, {0x2, 0x7, 0x3, 0x1}, 0x100000000, 0x6e6bb0, 0x0, 0x1, 0x2, 0x31aac7b7cebc5295}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in=@loopback, 0x3506, 0x6, 0x233d3e0a3b96533a, 0x7, 0x7, 0x3, 0x8}}, 0xe8) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x7, {0xffffffff, 0x7fffffff, 0xbac, 0xbf75}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x6, {0x3, 0x8762, 0x4, 0x9}}) 12:23:12 executing program 3: syz_execute_func(&(0x7f0000000280)="2e0fbedbd52998cd801b69e4294de47d625c7cd9660f627afe0f0fe48ade1cd6366536660f3814a797c5bfbef9fbe23df30f5bfb0f3a60631753c7e4c753fbc4e101670f72d10041c109092a2a00c4c4e2b5be2e676708ee643edfdf0080c4c3dd6da4680748778d5b8d5b0fd0950000000011f0f0807700cbc4e21d9d9d8b03000000f1c4e1d1ee870c0000005bc4e1d5dc4b0045363ef8c4c1c9dd38660f73f4e52c240f5e5bf487a9668b0000ec10ebc4e1dd56dc18c401fe5f0fe50dffefffff0000f2763843430f01c3c4c17562b906000000206d00660f38021b1411c4c2f3f6886ba14542") 12:23:12 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='gfs2\x00', 0x3, 0x0) 12:23:12 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000000c0)={0x6, 0x4, 0x2, 0x3f, 0x1, 0xffffffffffffffff, 0x0, [0x2400000018cf63, 0xe00000f, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0xc00200, 0x0, 0x0, 0x32000, 0xf]}, 0x3c) 12:23:12 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)) 12:23:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0xc, 0x0, 0x0) 12:23:12 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='syz'}, 0x10) 12:23:12 executing program 5: prctl$PR_GET_TIMERSLACK(0x1e) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x2000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x28, r1, 0x0, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) unshare(0x600) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) uname(&(0x7f0000000300)=""/66) symlink(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x100, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) 12:23:12 executing program 3: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f00000001c0)) 12:23:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[0x4000], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:23:12 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) close(r0) 12:23:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="39000000130009006900000000000000ab0080480b00000046000107000000141900014003000000000003f5169dcd4a77282b0bdca4000000", 0x39}], 0x1) 12:23:12 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x2, 0x7, 0x0, 0xfffffffffffffffa}]}) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="100826bd7000fcdbdf250200000028000200080002000300000004000400080002000000001c080001008100000008000200ffffffff7c00010044000400200001000a004e200000800000000000000000000000000000000000ffff00000a004e2100000537fe80000000400000000000000000001f09000000340002000800040003000000080001000e00000008000300658b00000800020001000000080004000400000008000200010000003c0007000c0003000200000000000000080001000600000008005c00a00000000c0003000500000000000000080001005c890000080002000800000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe66) r2 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x0, 0x0, 0x0) mq_getsetattr(r2, 0x0, &(0x7f0000356000)) 12:23:12 executing program 2: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x9, 0x6}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:23:12 executing program 0: r0 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)='ns/mnt\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="00de67fb1e99dea8a10e87df29c3", 0xe, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) syz_open_dev$audion(0x0, 0xbcc, 0x0) recvmsg(0xffffffffffffff9c, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000004c0)={0x2, 0x2, 0x0, [{0x8, 0x0, 0x5}, {0x5, 0x7, 0x2, 0xd2d, 0x0, 0x730e, 0x6}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:23:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[0x4000], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:23:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) 12:23:13 executing program 0: r0 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)='ns/mnt\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="00de67fb1e99dea8a10e87df29c3", 0xe, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) syz_open_dev$audion(0x0, 0xbcc, 0x0) recvmsg(0xffffffffffffff9c, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000004c0)={0x2, 0x2, 0x0, [{0x8, 0x0, 0x5}, {0x5, 0x7, 0x2, 0xd2d, 0x0, 0x730e, 0x6}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:23:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[0x4000], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 719.292039][T10123] bridge0: port 3(gretap0) entered disabled state [ 719.386474][T10123] device gretap0 left promiscuous mode [ 719.435368][T10123] bridge0: port 3(gretap0) entered disabled state 12:23:14 executing program 5: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x9, 0x6}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:23:14 executing program 3: r0 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)='ns/mnt\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="00de67fb1e99dea8a10e87df29c3", 0xe, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) syz_open_dev$audion(0x0, 0xbcc, 0x0) recvmsg(0xffffffffffffff9c, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000004c0)={0x2, 0x2, 0x0, [{0x8, 0x0, 0x5}, {0x5, 0x7, 0x2, 0xd2d, 0x0, 0x730e, 0x6}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:23:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[0x4000], [], @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:23:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 12:23:14 executing program 0: r0 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)='ns/mnt\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="00de67fb1e99dea8a10e87df29c3", 0xe, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) syz_open_dev$audion(0x0, 0xbcc, 0x0) recvmsg(0xffffffffffffff9c, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000004c0)={0x2, 0x2, 0x0, [{0x8, 0x0, 0x5}, {0x5, 0x7, 0x2, 0xd2d, 0x0, 0x730e, 0x6}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:23:14 executing program 2: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x9, 0x6}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:23:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x20) 12:23:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f16}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1b}) 12:23:14 executing program 0: r0 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)='ns/mnt\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="00de67fb1e99dea8a10e87df29c3", 0xe, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) syz_open_dev$audion(0x0, 0xbcc, 0x0) recvmsg(0xffffffffffffff9c, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000004c0)={0x2, 0x2, 0x0, [{0x8, 0x0, 0x5}, {0x5, 0x7, 0x2, 0xd2d, 0x0, 0x730e, 0x6}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:23:14 executing program 3: r0 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)='ns/mnt\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="00de67fb1e99dea8a10e87df29c3", 0xe, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) syz_open_dev$audion(0x0, 0xbcc, 0x0) recvmsg(0xffffffffffffff9c, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000004c0)={0x2, 0x2, 0x0, [{0x8, 0x0, 0x5}, {0x5, 0x7, 0x2, 0xd2d, 0x0, 0x730e, 0x6}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:23:14 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0), 0x4) 12:23:14 executing program 5: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x9, 0x6}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:23:14 executing program 2: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x9, 0x6}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:23:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00\x97\xebH\x88N\x81CxA\xdb\xa6\xfd*\xb6mY\xb8\xac\xc3\x94TD\xb3\xca\x135\xcf7\xab\xb9\xee\x8e\x89\x94#\x83\xb3\xfcC\x80\xc38\'\x12\')\xb3\x19\x18\x11\xceD\a\xf2\xe1\x86\x84F\x88O\xf5V\x90_\x10$o;\xa9[\x185\x92{/\x99\x8d*<\x98 \xb2G\xf4?g3.\xb9\v\x96\x9b~\x90B*\x0f\x93y\n\xd8-\xc11\xa2\t\x00\x00\x00\x00\x00\x00\x00\xa8\xef\x17\x83vY\x82\xa62V\x87(\x8c\x8c4[\x1c\x99\x98\x96\x89\xf4\x861\xb9\x8e\xf2(\x8dC\xb3pd\xda\xcbK\xcaz\xcd\xa3\x88dH\x8a\xf3m\xad\x9e\xd9\x1d@r\xc2\x95w\x80\x83:\x8e \x10\x15\xc4\xcf\xefPT.[\xb5\xf9\x86/pD\b\xcf;n+\rxi\x91\xc1\fw\x95\xc7>\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6cf\a\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\xf2\xcf`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.memory_spread_slab\x00l\x16_GkqYi\x92\x96!\xc2Avs\xe7', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10) 12:23:14 executing program 3: r0 = request_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000380)='ns/mnt\x00', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000480)="00de67fb1e99dea8a10e87df29c3", 0xe, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x8) syz_open_dev$audion(0x0, 0xbcc, 0x0) recvmsg(0xffffffffffffff9c, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0xa000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000004c0)={0x2, 0x2, 0x0, [{0x8, 0x0, 0x5}, {0x5, 0x7, 0x2, 0xd2d, 0x0, 0x730e, 0x6}]}) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 12:23:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 12:23:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x800020, &(0x7f00000001c0)=' '}) 12:23:15 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) [ 721.157693][T10123] IPVS: stopping backup sync thread 16063 ... 12:23:15 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 12:23:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f16}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1b}) 12:23:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07010009e00200000000ae0000000000000000000000000007000000000000080039e1db89c74f2c056aa606bb233324e73f2e34a1618e400ab3b9a1f71156c192666b22d89e5ccfc39a58703708758ade4a3a6219fb0000000000010001bbaea0b0494ec8e5e91e659d9fc8353adcd77b2c1741698b59e8ddd921c80e0ada68"], 0x80) [ 721.491113][T29819] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:23:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000000100)) 12:23:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) memfd_create(0x0, 0x0) 12:23:15 executing program 5: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x9, 0x6}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 721.894664][ C0] net_ratelimit: 38 callbacks suppressed [ 721.894673][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.906173][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:23:16 executing program 2: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffefc, 0xfffffffffffffffa) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getcwd(&(0x7f0000000400)=""/221, 0xdd) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000680)=[@in6={0xa, 0x4e23, 0x8, @rand_addr="207ee7939185ff44696440c5f96143ed", 0x84}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0x80}, @in={0x2, 0x4e21, @rand_addr=0x9}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x100000001}, @in={0x2, 0x4e23, @remote}], 0x94) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000240)={0x9, 0x6}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001380)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 12:23:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x40, 0x0, 0x0, 0x7, 0xed6f, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000740)='y\x00', 0x2, 0x3) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75a"], 0xa9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:23:16 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10003, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}}, 0x0) 12:23:16 executing program 4: pipe(&(0x7f0000000840)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000400)) 12:23:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f16}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1b}) 12:23:16 executing program 4: pipe(&(0x7f0000000840)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000400)) 12:23:16 executing program 0: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000000600)='./control\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000006c0)='./control\x00', 0x40000001, 0x0) faccessat(r0, &(0x7f000003fff6)='./control\x00', 0x3, 0x0) [ 722.307316][T10123] device bridge_slave_1 left promiscuous mode [ 722.313563][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.361195][T10123] device bridge_slave_0 left promiscuous mode [ 722.407958][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.445986][T10123] device bridge_slave_1 left promiscuous mode 12:23:16 executing program 4: pipe(&(0x7f0000000840)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000400)) [ 722.455529][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 722.461882][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 722.469295][T10123] bridge0: port 2(bridge_slave_1) entered disabled state 12:23:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x2007ff) [ 722.511190][T10123] device bridge_slave_0 left promiscuous mode [ 722.598436][T10123] bridge0: port 1(bridge_slave_0) entered disabled state 12:23:16 executing program 4: pipe(&(0x7f0000000840)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000400)) [ 722.854834][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 722.861379][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:23:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x20000002) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000080) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) socket$kcm(0x29, 0x2, 0x0) ptrace$getregs(0xe, r2, 0x7ff, &(0x7f0000000240)=""/15) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$midi(0x0, 0x40, 0x40) write$binfmt_elf64(r0, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0xe3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) [ 722.934363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 722.940194][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 722.946068][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 722.951859][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:23:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000005b40), 0x40000000000014d, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000002c0)) 12:23:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x40, 0x0, 0x0, 0x7, 0xed6f, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000740)='y\x00', 0x2, 0x3) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75a"], 0xa9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:23:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x40, 0x0, 0x0, 0x7, 0xed6f, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000740)='y\x00', 0x2, 0x3) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75a"], 0xa9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:23:17 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) [ 726.946594][T10123] device hsr_slave_1 left promiscuous mode [ 727.007971][T10123] device hsr_slave_0 left promiscuous mode [ 727.014435][ C0] net_ratelimit: 22 callbacks suppressed [ 727.014442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 727.025852][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 727.048093][T10123] team0 (unregistering): Port device team_slave_1 removed [ 727.061850][T10123] team0 (unregistering): Port device team_slave_0 removed [ 727.073304][T10123] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 727.094759][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.100574][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 727.106505][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.112240][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 727.126747][T10123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 727.174368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 727.180144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 727.222130][T10123] bond0 (unregistering): Released all slaves [ 727.254394][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 727.260189][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 727.497275][T10123] device hsr_slave_1 left promiscuous mode [ 727.581753][T10123] device hsr_slave_0 left promiscuous mode [ 727.648542][T10123] team0 (unregistering): Port device team_slave_1 removed [ 727.665387][T10123] team0 (unregistering): Port device team_slave_0 removed [ 727.677493][T10123] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 727.729220][T10123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 727.822039][T10123] bond0 (unregistering): Released all slaves 12:23:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f16}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1b}) 12:23:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x20000002) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000080) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) socket$kcm(0x29, 0x2, 0x0) ptrace$getregs(0xe, r2, 0x7ff, &(0x7f0000000240)=""/15) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$midi(0x0, 0x40, 0x40) write$binfmt_elf64(r0, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0xe3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 12:23:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x40, 0x0, 0x0, 0x7, 0xed6f, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000740)='y\x00', 0x2, 0x3) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75a"], 0xa9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:23:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x40, 0x0, 0x0, 0x7, 0xed6f, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000740)='y\x00', 0x2, 0x3) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75a"], 0xa9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:23:22 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:22 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:22 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:22 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x20000002) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000080) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) socket$kcm(0x29, 0x2, 0x0) ptrace$getregs(0xe, r2, 0x7ff, &(0x7f0000000240)=""/15) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$midi(0x0, 0x40, 0x40) write$binfmt_elf64(r0, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0xe3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 12:23:22 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:22 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:22 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x20000002) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000080) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) socket$kcm(0x29, 0x2, 0x0) ptrace$getregs(0xe, r2, 0x7ff, &(0x7f0000000240)=""/15) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$midi(0x0, 0x40, 0x40) write$binfmt_elf64(r0, 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0xe3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 12:23:22 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) 12:23:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x40, 0x0, 0x0, 0x7, 0xed6f, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000740)='y\x00', 0x2, 0x3) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75a"], 0xa9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:23:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x40303, 0x0, 0x40, 0x0, 0x0, 0x7, 0xed6f, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff8, 0x0, 0x1ff, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0xfffffffffffffe25) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000740)='y\x00', 0x2, 0x3) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65d996c39550c551257a02ed03c8eb492c34f90a8a59b7699e38d4d0be528b75034bd7d9f105005f64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee75a"], 0xa9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:23:23 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:23 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:23 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffffd, 0x40000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x10000) clone(0x20002104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0445609, &(0x7f0000000040)={0x8, 0xb2c1d368162485e1, 0x4, 0x20000, {0x0, 0x2710}, {0xc807023df9c7a37b, 0x0, 0x4, 0xfffffffffffffff9, 0xf0, 0x5, "55549f6f"}, 0x4, 0x1, @fd=r1, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x9, 0x0, 0x100, 0x1f, 'syz0\x00', 0xffffffff}, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x0, [], [0x0, 0xfffffffffffffffc, 0x101, 0x73d]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x9, 0xdb5}], 0x1) mremap(&(0x7f0000506000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000762000/0x2000)=nil) 12:23:23 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:23 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) 12:23:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) 12:23:24 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:24 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) 12:23:24 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:24 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) 12:23:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close(r0) 12:23:24 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, &(0x7f00000004c0)='nodev\x00') 12:23:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="728ac10000000054e90514a48ea9de1302") 12:23:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) 12:23:24 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:24 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffe) sysfs$1(0x1, &(0x7f0000000900)='/dev/audio#\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x3ea) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000080)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000004000, 0x0, 0xfffffffe, 0x1107, 0x2000000, 0x3f00, 0x1000000000000, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local, @empty={[0x3000000]}, @loopback}) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000280)="28dda5ac2ea9c6d10648ab23786ccc94fc21bb2ce1dc6e2357145fd8c60c0a07457823bba62066a71ec6046f8f988b034974e0a7d55f0bbd0f5cec9926465b0496211aa689097504698f58d4ff990646fe23aad8337c011b194ea63807f939fa27254f1ace50650edc388d72b31339864d9890712e630d5cd6109a78ed53004cebb555b06c98b892af910525d4675c750b63b64d24df7fc119f4b8635c5afb4dbd2b") openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) 12:23:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close(r0) 12:23:25 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) 12:23:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close(r0) 12:23:25 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:25 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x0, 0x40, 0x9}) bpf$MAP_CREATE(0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="843485e7a03ee0cd67664889f3696e9fa4ea22d27610acaeaf494ab1b5355e52ed0663032217db538caf2d61478f3659fb13025cf74ce37f78acd343f93f80665093cca16f733f106ab02329f1ec592bb1e4a2366e303d85487de7acc93222f1557cd0b40ea3e55e4847f4f737cb57e29eb1eaa00882313cc0cb14c1", 0x7c}, {0x0}], 0x2}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x80, 0x0}}, {{&(0x7f0000000b00)=@sco={0x1f, {0x1, 0x1, 0x7, 0x1000, 0x9}}, 0x80, 0x0}}, {{&(0x7f00000056c0)=@can, 0x80, 0x0}}], 0x4, 0x0) 12:23:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close(r0) 12:23:25 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@l2={0x1f, 0xffffdd86, {0x9}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="7fbc57ecfbee5e97262b72ddc827f60c371c8f622484d0618fc29decbfba7f968913d2e5c9a11bfe", 0x28}], 0x1}, 0x0) 12:23:25 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffe, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x180323}) 12:23:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 12:23:25 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@l2={0x1f, 0xffffdd86, {0x9}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="7fbc57ecfbee5e97262b72ddc827f60c371c8f622484d0618fc29decbfba7f968913d2e5c9a11bfe", 0x28}], 0x1}, 0x0) 12:23:25 executing program 1: syz_execute_func(&(0x7f0000000140)="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") 12:23:25 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x4, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="100000000600"/16, 0x10}]) 12:23:26 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffe, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x180323}) 12:23:26 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) 12:23:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="fc0000001900070700000000090007000aab80ff00000000000036930b000100fe8000000000000000ff000000000000008656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e917c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e2082038f4f8b29d3ef3d92c8334b3863032301748b6e4170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b170083df150c3b880f411f46a6b567b4d5715587e658a1add48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf10000000000f79699fb34d2b352cbae879a19", 0xfc) 12:23:26 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@l2={0x1f, 0xffffdd86, {0x9}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="7fbc57ecfbee5e97262b72ddc827f60c371c8f622484d0618fc29decbfba7f968913d2e5c9a11bfe", 0x28}], 0x1}, 0x0) 12:23:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 12:23:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockopt$packet_buf(r2, 0x111, 0x0, 0x0, &(0x7f0000000040)) [ 732.187997][T30092] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.4'. 12:23:26 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@l2={0x1f, 0xffffdd86, {0x9}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="7fbc57ecfbee5e97262b72ddc827f60c371c8f622484d0618fc29decbfba7f968913d2e5c9a11bfe", 0x28}], 0x1}, 0x0) 12:23:26 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffe, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x180323}) 12:23:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') close(r0) 12:23:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 12:23:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 12:23:26 executing program 5: prctl$PR_SET_PDEATHSIG(0x1, 0x0) 12:23:26 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffe, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x180323}) [ 732.854386][ C0] net_ratelimit: 30 callbacks suppressed [ 732.854393][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 732.865904][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:23:27 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) 12:23:27 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) stat(0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) 12:23:27 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/337], 0x151) sendfile(r1, r1, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 12:23:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 12:23:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 12:23:27 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/337], 0x151) sendfile(r1, r1, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 12:23:27 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0x8008563f, 0x0) [ 733.254383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 733.260206][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 733.335161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 733.341415][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 733.348197][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 733.354201][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 733.414378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 733.420334][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:23:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 12:23:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:27 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/337], 0x151) sendfile(r1, r1, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 12:23:28 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x7a) 12:23:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 12:23:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:28 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/337], 0x151) sendfile(r1, r1, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 12:23:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:28 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f00000006c0)=@can, 0x80, 0x0}, 0x0) 12:23:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000005f80)={0x5, 0x2a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000140)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x1) 12:23:29 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f00000006c0)=@can, 0x80, 0x0}, 0x0) 12:23:29 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/166, 0xa6}], 0x5, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x200}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={r1, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x4, 0x80000) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) 12:23:29 executing program 0: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{}], 0xffd9) 12:23:29 executing program 5: r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)="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", 0x4c1, 0xfffffffffffffffd) keyctl$read(0x3, r0, 0x0, 0x0) 12:23:29 executing program 1: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff38c, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000009c0)='/dev/input/mouse#\x00', 0x0, 0x20080) preadv(r0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000a40), 0xcd3ec31451590ca4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000a00)='cgroup\x00') readv(r3, &(0x7f0000000580), 0x3c1) ioctl$RTC_AIE_OFF(r2, 0x7002) 12:23:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:29 executing program 5: prctl$PR_GET_TIMERSLACK(0x1e) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="000327bd7004fedbdf25010000000c001473797a312000"/32], 0x1}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) unshare(0x600) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = socket$inet_tcp(0x2, 0x1, 0x0) uname(0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x74}}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x98840100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x18, 0x16, 0x602, 0x70bd2a, 0x25dfdbff, {0x7}, [@typed={0x4, 0x42}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) 12:23:29 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f00000006c0)=@can, 0x80, 0x0}, 0x0) 12:23:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0) 12:23:29 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/166, 0xa6}], 0x5, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x200}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={r1, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x4, 0x80000) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) 12:23:29 executing program 0: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{}], 0xffd9) 12:23:29 executing program 3: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f00000006c0)=@can, 0x80, 0x0}, 0x0) 12:23:29 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r1 = getpgid(0x0) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) 12:23:29 executing program 5: prctl$PR_GET_TIMERSLACK(0x1e) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="000327bd7004fedbdf25010000000c001473797a312000"/32], 0x1}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) unshare(0x600) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = socket$inet_tcp(0x2, 0x1, 0x0) uname(0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x74}}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x98840100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x18, 0x16, 0x602, 0x70bd2a, 0x25dfdbff, {0x7}, [@typed={0x4, 0x42}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) 12:23:29 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x220000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x3fd, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) write$P9_RWALK(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="3d0000006f02000400000300000005000000000000004004000000030000000000000033000000000400000000fe00000400000000000000adfcf17acdc29941ffd9dc048fbfb7825a95a0a755abe9565f9adf8f0f2417bfaf53d3f45288cfb01f00a8fb4279bc6be6b5346dc9742bd95625cf4150da684c95a816a644d9ca86f52e3633f5c04d0caccb19876b3935e03783f0f45119ae01f270cd2b00ec0d99405c900c226c8eabe7c18276eed3862de4cee24c63e8f8f80dc44757eb077b8b95b05535f0ff750c910015f7b26a35c14717ca18fb9aede5a296e310a0bd538917dd31bbdee482c5fcbc290443"], 0xed) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000380)) 12:23:29 executing program 1: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff38c, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000009c0)='/dev/input/mouse#\x00', 0x0, 0x20080) preadv(r0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000a40), 0xcd3ec31451590ca4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000a00)='cgroup\x00') readv(r3, &(0x7f0000000580), 0x3c1) ioctl$RTC_AIE_OFF(r2, 0x7002) 12:23:30 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/166, 0xa6}], 0x5, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x200}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={r1, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x4, 0x80000) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) 12:23:30 executing program 0: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{}], 0xffd9) 12:23:30 executing program 2: r0 = socket$packet(0x11, 0x200000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0xfffffffffffffffc, 0x0, 0xffffffffffffffff}, 0x4) 12:23:30 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r1 = getpgid(0x0) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) 12:23:30 executing program 5: prctl$PR_GET_TIMERSLACK(0x1e) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="000327bd7004fedbdf25010000000c001473797a312000"/32], 0x1}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) unshare(0x600) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = socket$inet_tcp(0x2, 0x1, 0x0) uname(0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x74}}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x98840100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x18, 0x16, 0x602, 0x70bd2a, 0x25dfdbff, {0x7}, [@typed={0x4, 0x42}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) 12:23:30 executing program 4: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/166, 0xa6}], 0x5, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x200}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={r1, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x4, 0x80000) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) 12:23:30 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r1 = getpgid(0x0) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) 12:23:30 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r1 = getpgid(0x0) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) 12:23:30 executing program 1: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff38c, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000009c0)='/dev/input/mouse#\x00', 0x0, 0x20080) preadv(r0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000a40), 0xcd3ec31451590ca4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000a00)='cgroup\x00') readv(r3, &(0x7f0000000580), 0x3c1) ioctl$RTC_AIE_OFF(r2, 0x7002) 12:23:30 executing program 0: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{}], 0xffd9) 12:23:30 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r1 = getpgid(0x0) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) 12:23:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bpq0\x00'}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) 12:23:30 executing program 5: prctl$PR_GET_TIMERSLACK(0x1e) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="000327bd7004fedbdf25010000000c001473797a312000"/32], 0x1}, 0x1, 0x0, 0x0, 0x40015}, 0x40000) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) unshare(0x600) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = socket$inet_tcp(0x2, 0x1, 0x0) uname(0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ip6erspan0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x89a0, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local={0xac, 0x14, 0x74}}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x4d, 0x2}, 0x7) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@dev, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x98840100}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x18, 0x16, 0x602, 0x70bd2a, 0x25dfdbff, {0x7}, [@typed={0x4, 0x42}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) 12:23:31 executing program 3: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r1 = getpgid(0x0) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) 12:23:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 12:23:31 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000440)="6467dfa80208c4c141c4d3aec4c3157ee600c4c2b9dc55f50f72f564c4e1281619c4e1cde0bb2100000036660f383d008fc828ecb0e1de63950bc4e3a56b450fdd") recvmsg(0xffffffffffffff9c, &(0x7f0000000600)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/145, 0x91}, 0x2003) sync() getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xffffffff00000000, 0x629, 0x6a88251}, &(0x7f0000000700)=0x10) r1 = getpgid(0x0) get_robust_list(r1, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0xc) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{}, {}]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00') getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) 12:23:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x4000, 0x0) 12:23:31 executing program 1: r0 = syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff38c, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000009c0)='/dev/input/mouse#\x00', 0x0, 0x20080) preadv(r0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000a40), 0xcd3ec31451590ca4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000a00)='cgroup\x00') readv(r3, &(0x7f0000000580), 0x3c1) ioctl$RTC_AIE_OFF(r2, 0x7002) 12:23:31 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000240)={0x0, 0x1, [0x1, 0x7, 0x5, 0x0, 0x5, 0x1, 0x2810]}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480) sendto$inet6(r2, &(0x7f0000000040)="b0a68e3606509d744caf132440ea28787ed3060f3a4e90de81883fd6b9ceb00bc9fa3c", 0x23, 0x40004, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340), 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r4, 0x0) close(r3) 12:23:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0x6}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae60, 0x0) 12:23:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x4000, 0x0) 12:23:31 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0xdfa1b000}) 12:23:31 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0) 12:23:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x4000, 0x0) 12:23:31 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0xc, 0x807, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) unshare(0x40000000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x80000001) ioctl$TIOCNOTTY(r0, 0x5422) symlink(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), 0xffffffffffffffff, 0x3}}, 0x18) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000340)) timer_gettime(0x0, &(0x7f0000000380)) [ 737.894390][ C0] net_ratelimit: 30 callbacks suppressed [ 737.894400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 737.906025][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:23:32 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000240)={0x0, 0x1, [0x1, 0x7, 0x5, 0x0, 0x5, 0x1, 0x2810]}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480) sendto$inet6(r2, &(0x7f0000000040)="b0a68e3606509d744caf132440ea28787ed3060f3a4e90de81883fd6b9ceb00bc9fa3c", 0x23, 0x40004, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340), 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r4, 0x0) close(r3) 12:23:32 executing program 2: r0 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 12:23:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x4000, 0x0) 12:23:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:23:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) [ 738.187816][T30378] IPVS: ftp: loaded support on port[0] = 21 [ 738.239603][T30392] input: syz0 as /devices/virtual/input/input87 [ 738.573529][T30392] input: syz0 as /devices/virtual/input/input88 [ 738.850572][T30383] IPVS: ftp: loaded support on port[0] = 21 12:23:33 executing program 3: syz_emit_ethernet(0x20d, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0xff010000}, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @empty=0xac141400, @random="eb5de09d9520", @dev={0xac, 0x223}}}}}, 0x0) 12:23:33 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) close(r2) 12:23:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x80ffffff00000000, 0x700, 0x0, 0x89060000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0xf000}, @mcast2}}}}}}}, 0x0) 12:23:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:23:33 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000240)={0x0, 0x1, [0x1, 0x7, 0x5, 0x0, 0x5, 0x1, 0x2810]}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480) sendto$inet6(r2, &(0x7f0000000040)="b0a68e3606509d744caf132440ea28787ed3060f3a4e90de81883fd6b9ceb00bc9fa3c", 0x23, 0x40004, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340), 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r4, 0x0) close(r3) 12:23:33 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0xc, 0x807, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) unshare(0x40000000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x80000001) ioctl$TIOCNOTTY(r0, 0x5422) symlink(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), 0xffffffffffffffff, 0x3}}, 0x18) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000340)) timer_gettime(0x0, &(0x7f0000000380)) [ 739.094387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 739.100206][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 739.119583][T30409] input: syz0 as /devices/virtual/input/input89 12:23:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000083, 0x3], [0xc1]}) 12:23:33 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x805) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000040)={0xffffffffffffffff}) 12:23:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) [ 739.283278][T30413] IPVS: ftp: loaded support on port[0] = 21 [ 739.345536][T30431] usb usb1: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #-1 12:23:33 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af25, &(0x7f0000000600)) 12:23:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc0585605, &(0x7f0000000100)) [ 739.548431][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 739.554322][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 739.574385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 739.580227][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 739.586144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 739.591920][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:23:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x47}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x2b7, &(0x7f000000cf3d)=""/195}, 0x48) 12:23:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000083, 0x3], [0xc1]}) 12:23:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:23:33 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af25, &(0x7f0000000600)) 12:23:33 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r1, 0x7) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000240)={0x0, 0x1, [0x1, 0x7, 0x5, 0x0, 0x5, 0x1, 0x2810]}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480) sendto$inet6(r2, &(0x7f0000000040)="b0a68e3606509d744caf132440ea28787ed3060f3a4e90de81883fd6b9ceb00bc9fa3c", 0x23, 0x40004, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r4 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340), 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r4, 0x0) close(r3) [ 739.921180][T30451] input: syz0 as /devices/virtual/input/input90 12:23:34 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) syz_execute_func(&(0x7f0000000100)="0c1fb5b598cd801b6969ef69dc00d9d9d0c44139fd7bc4c119e4bda76623ff1cc18fe9589b26c727e4c753fbc4c401f6fe58c4427d135200c4413bf2168f4808eebce00000802000c421fc640fa8c1ea01efc36645c4c14dd98999899999c0c52d0fa6172c24a1a1460f569f0000000026400f0d18c401fe5ff6395f64fc6736676666430fefb3000000000004f4660f3841ae390900000f17720d14111d54111d00") 12:23:34 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0xc, 0x807, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) unshare(0x40000000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x80000001) ioctl$TIOCNOTTY(r0, 0x5422) symlink(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), 0xffffffffffffffff, 0x3}}, 0x18) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000340)) timer_gettime(0x0, &(0x7f0000000380)) 12:23:34 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af25, &(0x7f0000000600)) 12:23:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000083, 0x3], [0xc1]}) 12:23:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:23:34 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af25, &(0x7f0000000600)) 12:23:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000083, 0x3], [0xc1]}) [ 740.404569][T30477] input: syz0 as /devices/virtual/input/input91 12:23:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'system.', 'posix_acl_accessvboxnet1vboxnet0\x00'}) [ 740.618457][T30478] IPVS: ftp: loaded support on port[0] = 21 12:23:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 12:23:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x3}]]}}}]}, 0x40}}, 0x0) 12:23:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="728ac10000000054e90514a48e") 12:23:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x800000000000000, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x7b5f7}}, 0x14}}, 0x0) pipe(&(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12:23:34 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) syz_execute_func(&(0x7f0000000100)="0c1fb5b598cd801b6969ef69dc00d9d9d0c44139fd7bc4c119e4bda76623ff1cc18fe9589b26c727e4c753fbc4c401f6fe58c4427d135200c4413bf2168f4808eebce00000802000c421fc640fa8c1ea01efc36645c4c14dd98999899999c0c52d0fa6172c24a1a1460f569f0000000026400f0d18c401fe5ff6395f64fc6736676666430fefb3000000000004f4660f3841ae390900000f17720d14111d54111d00") [ 740.972270][T30498] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 12:23:37 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socketpair(0xc, 0x807, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) unshare(0x40000000) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x80000001) ioctl$TIOCNOTTY(r0, 0x5422) symlink(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), 0xffffffffffffffff, 0x3}}, 0x18) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000340)) timer_gettime(0x0, &(0x7f0000000380)) 12:23:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) 12:23:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 12:23:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x4000, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x8, 0x27201946, 0x0, 0x7, 0x0, 0x8, 0x4, 0x1, 0x69, 0x9, 0x24000000000, 0x7, 0x1, 0x625a00, 0x100000, 0xfffffffeffffffff, 0x2, 0x75b0, 0x1, 0x5, 0x20ad3caf, 0x100, 0x3, 0x4000000000000, 0x3, 0x5, 0x13e1, 0xffffffff, 0x7, 0x934, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff8, 0x3ff, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180)}, 0x42, 0x0, 0x5, 0xb, 0x80000001, 0x800, 0x80000001}, r1, 0x5, r2, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140)={0x3}, 0x8, 0x80000) sendfile(r0, r0, 0x0, 0x2000005) poll(&(0x7f0000000000)=[{r0}, {r0, 0x2000}, {r0, 0x2d4}, {r3, 0x4488}, {0xffffffffffffffff, 0x400}, {r0, 0x4}], 0x6, 0x7) 12:23:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x800000000000000, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x7b5f7}}, 0x14}}, 0x0) pipe(&(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12:23:37 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) syz_execute_func(&(0x7f0000000100)="0c1fb5b598cd801b6969ef69dc00d9d9d0c44139fd7bc4c119e4bda76623ff1cc18fe9589b26c727e4c753fbc4c401f6fe58c4427d135200c4413bf2168f4808eebce00000802000c421fc640fa8c1ea01efc36645c4c14dd98999899999c0c52d0fa6172c24a1a1460f569f0000000026400f0d18c401fe5ff6395f64fc6736676666430fefb3000000000004f4660f3841ae390900000f17720d14111d54111d00") [ 743.126339][ C1] net_ratelimit: 20 callbacks suppressed [ 743.126351][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:23:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x4000, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x8, 0x27201946, 0x0, 0x7, 0x0, 0x8, 0x4, 0x1, 0x69, 0x9, 0x24000000000, 0x7, 0x1, 0x625a00, 0x100000, 0xfffffffeffffffff, 0x2, 0x75b0, 0x1, 0x5, 0x20ad3caf, 0x100, 0x3, 0x4000000000000, 0x3, 0x5, 0x13e1, 0xffffffff, 0x7, 0x934, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff8, 0x3ff, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180)}, 0x42, 0x0, 0x5, 0xb, 0x80000001, 0x800, 0x80000001}, r1, 0x5, r2, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140)={0x3}, 0x8, 0x80000) sendfile(r0, r0, 0x0, 0x2000005) poll(&(0x7f0000000000)=[{r0}, {r0, 0x2000}, {r0, 0x2d4}, {r3, 0x4488}, {0xffffffffffffffff, 0x400}, {r0, 0x4}], 0x6, 0x7) 12:23:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) [ 743.254798][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 743.261820][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 743.342710][T30531] IPVS: ftp: loaded support on port[0] = 21 [ 743.419303][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:23:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x4000, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x8, 0x27201946, 0x0, 0x7, 0x0, 0x8, 0x4, 0x1, 0x69, 0x9, 0x24000000000, 0x7, 0x1, 0x625a00, 0x100000, 0xfffffffeffffffff, 0x2, 0x75b0, 0x1, 0x5, 0x20ad3caf, 0x100, 0x3, 0x4000000000000, 0x3, 0x5, 0x13e1, 0xffffffff, 0x7, 0x934, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff8, 0x3ff, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180)}, 0x42, 0x0, 0x5, 0xb, 0x80000001, 0x800, 0x80000001}, r1, 0x5, r2, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140)={0x3}, 0x8, 0x80000) sendfile(r0, r0, 0x0, 0x2000005) poll(&(0x7f0000000000)=[{r0}, {r0, 0x2000}, {r0, 0x2d4}, {r3, 0x4488}, {0xffffffffffffffff, 0x400}, {r0, 0x4}], 0x6, 0x7) 12:23:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) 12:23:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x800000000000000, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x7b5f7}}, 0x14}}, 0x0) pipe(&(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 743.655336][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 743.661153][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 743.737694][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 743.743819][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 743.750234][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 743.756243][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:23:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x4000, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x8, 0x27201946, 0x0, 0x7, 0x0, 0x8, 0x4, 0x1, 0x69, 0x9, 0x24000000000, 0x7, 0x1, 0x625a00, 0x100000, 0xfffffffeffffffff, 0x2, 0x75b0, 0x1, 0x5, 0x20ad3caf, 0x100, 0x3, 0x4000000000000, 0x3, 0x5, 0x13e1, 0xffffffff, 0x7, 0x934, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff8, 0x3ff, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180)}, 0x42, 0x0, 0x5, 0xb, 0x80000001, 0x800, 0x80000001}, r1, 0x5, r2, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140)={0x3}, 0x8, 0x80000) sendfile(r0, r0, 0x0, 0x2000005) poll(&(0x7f0000000000)=[{r0}, {r0, 0x2000}, {r0, 0x2d4}, {r3, 0x4488}, {0xffffffffffffffff, 0x400}, {r0, 0x4}], 0x6, 0x7) 12:23:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) close(r0) 12:23:38 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) syz_execute_func(&(0x7f0000000100)="0c1fb5b598cd801b6969ef69dc00d9d9d0c44139fd7bc4c119e4bda76623ff1cc18fe9589b26c727e4c753fbc4c401f6fe58c4427d135200c4413bf2168f4808eebce00000802000c421fc640fa8c1ea01efc36645c4c14dd98999899999c0c52d0fa6172c24a1a1460f569f0000000026400f0d18c401fe5ff6395f64fc6736676666430fefb3000000000004f4660f3841ae390900000f17720d14111d54111d00") 12:23:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 12:23:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x800000000000000, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x7b5f7}}, 0x14}}, 0x0) pipe(&(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12:23:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x500) 12:23:38 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x44}}) 12:23:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x800000000000000, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x7b5f7}}, 0x14}}, 0x0) pipe(&(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12:23:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 12:23:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) 12:23:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x500) 12:23:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x800000000000000, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x7b5f7}}, 0x14}}, 0x0) pipe(&(0x7f0000000300)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12:23:39 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') 12:23:39 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/122, 0x7a) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 12:23:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r0) [ 745.747301][T30589] ------------[ cut here ]------------ [ 745.753438][T30589] refcount_t: increment on 0; use-after-free. [ 745.761151][T30589] WARNING: CPU: 0 PID: 30589 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 745.771132][T30589] Kernel panic - not syncing: panic_on_warn set ... [ 745.772618][T30593] kobject: 'wlan1' (000000008554fec6): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim27/net/wlan1' [ 745.777724][T30589] CPU: 0 PID: 30589 Comm: syz-executor.5 Not tainted 5.2.0-rc1+ #2 [ 745.777817][T30589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.777822][T30589] Call Trace: [ 745.777847][T30589] dump_stack+0x172/0x1f0 [ 745.777868][T30589] ? refcount_inc_checked+0x10/0x70 [ 745.777886][T30589] panic+0x2cb/0x744 [ 745.777901][T30589] ? __warn_printk+0xf3/0xf3 [ 745.777920][T30589] ? refcount_inc_checked+0x61/0x70 [ 745.777934][T30589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 745.777949][T30589] ? __warn.cold+0x5/0x4d [ 745.777965][T30589] ? refcount_inc_checked+0x61/0x70 [ 745.777980][T30589] __warn.cold+0x20/0x4d [ 745.777994][T30589] ? refcount_inc_checked+0x61/0x70 [ 745.778010][T30589] report_bug+0x263/0x2b0 [ 745.778031][T30589] do_error_trap+0x11b/0x200 [ 745.778062][T30589] do_invalid_op+0x37/0x50 [ 745.778072][T30589] ? refcount_inc_checked+0x61/0x70 [ 745.778083][T30589] invalid_op+0x14/0x20 [ 745.778094][T30589] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 745.778108][T30589] Code: 1d a0 85 48 06 31 ff 89 de e8 7b 70 3c fe 84 db 75 dd e8 32 6f 3c fe 48 c7 c7 00 96 a4 87 c6 05 80 85 48 06 01 e8 9d b4 0e fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 745.778114][T30589] RSP: 0018:ffff88806b6378e8 EFLAGS: 00010282 [ 745.778124][T30589] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 745.778133][T30589] RDX: 0000000000013e0d RSI: ffffffff815ac7e6 RDI: ffffed100d6c6f0f [ 745.851806][T30593] kobject: 'queues' (0000000008f8c5b2): kobject_add_internal: parent: 'wlan1', set: '' [ 745.855026][T30589] RBP: ffff88806b6378f8 R08: ffff88805c2ac700 R09: ffffed1015d06011 [ 745.855036][T30589] R10: ffffed1015d06010 R11: ffff8880ae830087 R12: ffff88821ae1b0b8 [ 745.855044][T30589] R13: ffff8880963f31a0 R14: ffff8880963f3198 R15: ffff88821ae1b038 [ 745.855076][T30589] ? vprintk_func+0x86/0x189 [ 745.855094][T30589] ? refcount_inc_checked+0x61/0x70 [ 745.855109][T30589] kobject_get+0x66/0xc0 [ 745.855123][T30589] kobject_add_internal+0x14f/0x380 [ 745.855140][T30589] ? kfree_const+0x5e/0x70 [ 745.855155][T30589] kobject_add+0x150/0x1c0 [ 745.855168][T30589] ? kset_create_and_add+0x1a0/0x1a0 [ 745.855186][T30589] ? get_device_parent.isra.0+0x34c/0x560 [ 745.855201][T30589] ? rcu_read_lock_sched_held+0x110/0x130 [ 745.855215][T30589] ? kmem_cache_alloc_trace+0x351/0x750 [ 745.855239][T30589] get_device_parent.isra.0+0x413/0x560 [ 745.855254][T30589] device_add+0x2df/0x17a0 [ 745.855281][T30589] ? get_device_parent.isra.0+0x560/0x560 [ 745.876584][T30593] kobject: 'queues' (0000000008f8c5b2): kobject_uevent_env [ 745.878942][T30589] ? up_write+0xbe/0x1e0 [ 745.878968][T30589] hci_register_dev+0x2e8/0x860 [ 745.878991][T30589] __vhci_create_device+0x2d0/0x5a0 [ 745.879009][T30589] vhci_write+0x2d0/0x470 [ 745.900975][T30593] kobject: 'queues' (0000000008f8c5b2): kobject_uevent_env: filter function caused the event to drop! [ 745.908535][T30589] new_sync_write+0x4d3/0x770 [ 745.908553][T30589] ? new_sync_read+0x800/0x800 [ 745.908567][T30589] ? retint_kernel+0x2b/0x2b [ 745.908585][T30589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 745.908604][T30589] ? retint_kernel+0x2b/0x2b [ 745.908624][T30589] __vfs_write+0xe1/0x110 [ 745.908645][T30589] vfs_write+0x20c/0x580 [ 745.908661][T30589] ksys_write+0x14f/0x290 [ 745.908677][T30589] ? __ia32_sys_read+0xb0/0xb0 [ 745.908694][T30589] ? do_fast_syscall_32+0xd1/0xd7d [ 745.908707][T30589] ? entry_SYSENTER_compat+0x70/0x7f [ 745.908718][T30589] ? do_fast_syscall_32+0xd1/0xd7d [ 745.908736][T30589] __ia32_sys_write+0x71/0xb0 [ 745.908752][T30589] do_fast_syscall_32+0x27b/0xd7d [ 745.908776][T30589] entry_SYSENTER_compat+0x70/0x7f [ 745.938272][T30593] kobject: 'rx-0' (00000000775ddc49): kobject_add_internal: parent: 'queues', set: 'queues' [ 745.940876][T30589] RIP: 0023:0xf7ffc849 [ 745.940892][T30589] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 745.940900][T30589] RSP: 002b:00000000f5df80cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 745.940914][T30589] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 745.940923][T30589] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.940931][T30589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.940939][T30589] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 745.940947][T30589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.949723][T30589] Kernel Offset: disabled [ 746.226910][T30589] Rebooting in 86400 seconds..